last executing test programs: 1m36.69975065s ago: executing program 32 (id=954): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func, @snprintf, @tail_call, @jmp={0x5, 0x0, 0xc}, @cb_func, @call={0x85, 0x0, 0x0, 0x75}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe5a}}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic, @map_fd={0x18, 0x1}, @func, @exit, @cb_func]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) 1m8.737132534s ago: executing program 33 (id=2106): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 40.785310696s ago: executing program 2 (id=3603): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 40.672132356s ago: executing program 2 (id=3607): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0xc3, 0x6, 0x79, 0x60, 0x0, 0x4, 0x0}) 40.655621586s ago: executing program 2 (id=3610): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) 40.582489186s ago: executing program 2 (id=3612): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 40.551243676s ago: executing program 2 (id=3617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011aa"], 0x0) 40.526078035s ago: executing program 2 (id=3620): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 25.032068065s ago: executing program 34 (id=3620): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 23.45534644s ago: executing program 5 (id=3791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x4800000000) 23.41369791s ago: executing program 4 (id=3793): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020040008500000082000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23.33513907s ago: executing program 5 (id=3794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000080)=""/240) 23.273396219s ago: executing program 5 (id=3796): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x5884, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 23.23978316s ago: executing program 5 (id=3798): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 23.145811939s ago: executing program 0 (id=3800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000680)={{0x77359400}, {0x77359400}}, &(0x7f00000006c0)) 23.113715419s ago: executing program 0 (id=3801): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xd, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x0, 0x5, 0x0, 0xe, 0x0, "00120dd608f500001e2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xd) 23.056318809s ago: executing program 0 (id=3802): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, &(0x7f0000000300)=0x8) 23.042162729s ago: executing program 4 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 23.019150239s ago: executing program 0 (id=3804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000240)=0x44800, 0x4) 22.856385499s ago: executing program 4 (id=3806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) 22.682970378s ago: executing program 4 (id=3809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 22.595986968s ago: executing program 7 (id=3731): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 22.447137737s ago: executing program 4 (id=3811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) statx(r0, 0x0, 0x1000, 0x6000, 0x0) 22.358162587s ago: executing program 0 (id=3812): ioperm(0x0, 0x5fd, 0x80000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) 22.345237817s ago: executing program 5 (id=3813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, &(0x7f0000000080)=0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) 22.269645497s ago: executing program 4 (id=3814): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 22.269525077s ago: executing program 35 (id=3814): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 22.119824296s ago: executing program 5 (id=3816): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) unshare(0x2a020400) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) 22.119721696s ago: executing program 36 (id=3816): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) unshare(0x2a020400) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) 22.087537986s ago: executing program 0 (id=3817): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOPEN(r1, &(0x7f0000000280)={0x18, 0xd, 0x1, {{0x10, 0x1, 0x7}, 0xc5}}, 0x18) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/33, 0x21}], 0x1) 22.070064966s ago: executing program 37 (id=3817): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOPEN(r1, &(0x7f0000000280)={0x18, 0xd, 0x1, {{0x10, 0x1, 0x7}, 0xc5}}, 0x18) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/33, 0x21}], 0x1) 20.586784502s ago: executing program 7 (id=3820): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') sync_file_range(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 20.586721692s ago: executing program 38 (id=3820): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') sync_file_range(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 947.610854ms ago: executing program 1 (id=4630): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 932.208503ms ago: executing program 1 (id=4631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 916.220553ms ago: executing program 1 (id=4633): unshare(0x28000600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') pread64(r1, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) 889.483633ms ago: executing program 1 (id=4636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 722.817013ms ago: executing program 6 (id=4649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='inet_sk_error_report\x00', r1, 0x0, 0x3}, 0x18) syz_socket_connect_nvme_tcp() 700.156213ms ago: executing program 6 (id=4650): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 670.765633ms ago: executing program 6 (id=4653): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$cgroup_devices(r0, &(0x7f0000000200)={'a', ' *:* ', 'm\x00'}, 0x8) 596.553982ms ago: executing program 8 (id=4655): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) 579.987892ms ago: executing program 8 (id=4656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0) 556.514432ms ago: executing program 6 (id=4657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 555.985652ms ago: executing program 8 (id=4658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000e40)=ANY=[], 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) 501.813942ms ago: executing program 8 (id=4661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='inet_sk_error_report\x00', r1, 0x0, 0x3}, 0x18) syz_socket_connect_nvme_tcp() 439.767162ms ago: executing program 6 (id=4662): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r2) 438.659842ms ago: executing program 8 (id=4663): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 414.206442ms ago: executing program 6 (id=4665): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)=0x5) 399.005332ms ago: executing program 8 (id=4667): setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) 321.481971ms ago: executing program 9 (id=4669): r0 = io_uring_setup(0x30d8, &(0x7f0000000380)={0x0, 0x2548, 0x400, 0x0, 0x238}) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 320.914101ms ago: executing program 3 (id=4679): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x24020400) 279.040952ms ago: executing program 3 (id=4670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50) 228.701501ms ago: executing program 3 (id=4671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 225.935501ms ago: executing program 9 (id=4672): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000200)='bridge0\x00') 90.897281ms ago: executing program 9 (id=4673): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3b}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x66, 0x63, 0x0, 0x36, 0x35, 0x30, 0x0, 0x30, 0x38, 0x32, 0x37, 0x65, 0x65, 0x34, 0x63, 0x63]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705320625930e6c1e3e2a51a92fd796bc34d7cf6e0236805ba2b9963d16563e4603a4c6a7ef0000000000000059998b5000"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 77.914521ms ago: executing program 9 (id=4674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) 57.571501ms ago: executing program 3 (id=4675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 57.207141ms ago: executing program 9 (id=4676): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 48.43655ms ago: executing program 3 (id=4677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x9, 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 39.253521ms ago: executing program 1 (id=4678): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "3055fbfe96bf1afd87dc98fde2ee85b3", '\x00', "4e694600000000e4"}, 0x28) 23.332701ms ago: executing program 3 (id=4680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19.11133ms ago: executing program 9 (id=4681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 0s ago: executing program 1 (id=4682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value=0x11}, 0x48) kernel console output (not intermixed with test programs): with error 28 [ 99.182331][T11080] loop6: detected capacity change from 0 to 512 [ 99.211354][T11080] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 99.246126][T11080] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2971: corrupted in-inode xattr: e_name out of bounds [ 99.270698][T11080] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2971: couldn't read orphan inode 15 (err -117) [ 99.293316][T11091] netlink: 'syz.5.2974': attribute type 1 has an invalid length. [ 99.303073][T11080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.357064][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.396354][T11101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2979'. [ 99.406869][T11105] sctp: [Deprecated]: syz.4.2982 (pid 11105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.406869][T11105] Use struct sctp_sack_info instead [ 99.536084][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 99.536099][ T29] audit: type=1326 audit(1734724942.612:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.566440][ T29] audit: type=1326 audit(1734724942.612:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.591275][ T29] audit: type=1326 audit(1734724942.632:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.615356][ T29] audit: type=1326 audit(1734724942.632:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.638968][ T29] audit: type=1326 audit(1734724942.632:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.663149][ T29] audit: type=1400 audit(1734724942.642:2306): avc: denied { map } for pid=11138 comm="syz.5.2998" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.704717][T11144] loop5: detected capacity change from 0 to 128 [ 99.711821][ T29] audit: type=1326 audit(1734724942.782:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.736900][ T29] audit: type=1326 audit(1734724942.812:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.767049][ T29] audit: type=1326 audit(1734724942.842:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.773563][T11150] loop4: detected capacity change from 0 to 512 [ 99.791243][ T29] audit: type=1326 audit(1734724942.842:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.6.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 99.839808][T11150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.880160][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.952365][T11170] netlink: 'syz.6.3012': attribute type 3 has an invalid length. [ 100.024093][T11183] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.108887][T11199] loop5: detected capacity change from 0 to 512 [ 100.138531][T11199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.151732][T11199] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.152532][T11207] loop2: detected capacity change from 0 to 128 [ 100.172911][T11199] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.3026: corrupted inode contents [ 100.173322][T11207] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.187349][T11199] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.3026: mark_inode_dirty error [ 100.198093][T11207] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.211611][T11199] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.3026: corrupted inode contents [ 100.238606][T11211] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.3026: corrupted inode contents [ 100.252061][T11211] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.3026: mark_inode_dirty error [ 100.266629][T11211] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.3026: corrupted inode contents [ 100.279884][ T5389] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.291340][T11213] loop4: detected capacity change from 0 to 512 [ 100.310297][T11213] EXT4-fs: inline encryption not supported [ 100.325248][T11215] bond1: entered promiscuous mode [ 100.330552][T11215] bond1: entered allmulticast mode [ 100.336963][T11215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.344409][ T6810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.355609][T11213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.368842][T11213] ext4 filesystem being mounted at /645/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.369683][T11215] bond1 (unregistering): Released all slaves [ 100.389859][T11213] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.3031: corrupted inode contents [ 100.402967][T11213] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.3031: mark_inode_dirty error [ 100.415195][T11213] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.3031: corrupted inode contents [ 100.428103][T11213] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3031: mark_inode_dirty error [ 100.480280][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.598662][T11259] syz.5.3046[11259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.598726][T11259] syz.5.3046[11259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.611930][T11259] syz.5.3046[11259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.687993][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 100.746850][T11274] Cannot find del_set index 1 as target [ 100.981989][T11301] loop2: detected capacity change from 0 to 8192 [ 100.990627][T11301] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.005647][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.014453][T11301] FAT-fs (loop2): Filesystem has been set read-only [ 101.021514][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.031946][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.040881][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.050176][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.083231][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.103970][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.114467][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.133891][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.142835][T11301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 101.195272][T11324] loop4: detected capacity change from 0 to 512 [ 101.206877][T11324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.243462][T11324] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3073: bg 0: block 321: padding at end of block bitmap is not set [ 101.271934][T11329] loop0: detected capacity change from 0 to 1024 [ 101.280738][T11329] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.304408][T11329] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 101.309634][T11336] netlink: 'syz.5.3078': attribute type 21 has an invalid length. [ 101.312412][T11329] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.328277][T11329] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 101.339214][T11329] EXT4-fs (loop0): Remounting filesystem read-only [ 101.364985][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.374291][T11329] EXT4-fs (loop0): 1 orphan inode deleted [ 101.383063][T11329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.395047][T11329] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 101.402130][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.413317][T11343] team_slave_0: entered promiscuous mode [ 101.419019][T11343] team_slave_1: entered promiscuous mode [ 101.428413][T11344] loop5: detected capacity change from 0 to 2048 [ 101.436801][T11343] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 101.481299][T11350] loop2: detected capacity change from 0 to 128 [ 101.501339][T11344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.548858][T11344] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.564916][T11344] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 33 with error 28 [ 101.577640][T11344] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.577640][T11344] [ 101.588191][T11344] EXT4-fs (loop5): Total free blocks count 0 [ 101.594304][T11344] EXT4-fs (loop5): Free/Dirty block details [ 101.600876][T11344] EXT4-fs (loop5): free_blocks=2415919104 [ 101.606749][T11344] EXT4-fs (loop5): dirty_blocks=64 [ 101.611988][T11344] EXT4-fs (loop5): Block reservation details [ 101.618712][T11344] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 101.655809][ T5925] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.716096][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.737826][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.769956][T11386] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 101.770572][T11388] syz.4.3102[11388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.778203][T11386] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 101.778448][T11388] syz.4.3102[11388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.802364][T11388] syz.4.3102[11388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.814177][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3104'. [ 101.838962][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 101.847993][T11394] netlink: 'syz.0.3105': attribute type 2 has an invalid length. [ 101.891326][T11398] loop0: detected capacity change from 0 to 2048 [ 101.929295][T11398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.945619][T11398] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.960585][T11398] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 33 with error 28 [ 101.973976][T11398] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.973976][T11398] [ 101.983728][T11398] EXT4-fs (loop0): Total free blocks count 0 [ 101.989799][T11398] EXT4-fs (loop0): Free/Dirty block details [ 101.996910][T11398] EXT4-fs (loop0): free_blocks=2415919104 [ 102.002742][T11398] EXT4-fs (loop0): dirty_blocks=64 [ 102.007887][T11398] EXT4-fs (loop0): Block reservation details [ 102.013916][T11398] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 102.033356][ T5943] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.062026][T11414] loop5: detected capacity change from 0 to 512 [ 102.069655][T11414] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.3113: iget: special inode unallocated [ 102.082606][T11414] EXT4-fs (loop5): Remounting filesystem read-only [ 102.090407][T11414] EXT4-fs (loop5): no journal found [ 102.095671][T11414] EXT4-fs (loop5): can't get journal size [ 102.102592][T11414] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 102.112144][T11414] EXT4-fs (loop5): failed to initialize system zone (-117) [ 102.120714][T11414] EXT4-fs (loop5): mount failed [ 102.278745][T11432] syz.5.3121[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.278902][T11432] syz.5.3121[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.283405][T11433] loop2: detected capacity change from 0 to 512 [ 102.291113][T11432] syz.5.3121[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.318486][T11433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.364143][T11433] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.396017][T11433] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.3120: corrupted inode contents [ 102.419068][T11433] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.3120: mark_inode_dirty error [ 102.436380][T11433] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.3120: corrupted inode contents [ 102.460168][T11433] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.3120: corrupted inode contents [ 102.479449][T11433] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.3120: mark_inode_dirty error [ 102.495396][T11433] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.3120: corrupted inode contents [ 102.531326][ T5389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.532900][T11456] syz.5.3132 (11456) used greatest stack depth: 8864 bytes left [ 102.606556][T11470] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3138'. [ 102.672576][T11484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3145'. [ 102.895279][T11505] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.902808][T11505] vhci_hcd: invalid port number 23 [ 102.907950][T11505] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 102.955434][T11513] bond1: entered promiscuous mode [ 102.960713][T11513] bond1: entered allmulticast mode [ 102.968425][T11513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.978565][T11513] bond1 (unregistering): Released all slaves [ 103.139115][T11528] netlink: 'syz.4.3164': attribute type 6 has an invalid length. [ 103.734541][T11599] xt_hashlimit: max too large, truncated to 1048576 [ 103.814090][T11606] loop0: detected capacity change from 0 to 512 [ 103.833838][T11606] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.3201: iget: special inode unallocated [ 103.848791][T11606] EXT4-fs (loop0): Remounting filesystem read-only [ 103.855408][T11606] EXT4-fs (loop0): no journal found [ 103.860615][T11606] EXT4-fs (loop0): can't get journal size [ 103.870246][T11606] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 103.881399][T11606] EXT4-fs (loop0): failed to initialize system zone (-117) [ 103.888664][T11606] EXT4-fs (loop0): mount failed [ 103.998099][T11630] loop2: detected capacity change from 0 to 8192 [ 104.023101][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.033290][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.036137][T11630] syz.2.3211: attempt to access beyond end of device [ 104.036137][T11630] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 104.057768][T11630] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 104.065650][T11630] FAT-fs (loop2): Filesystem has been set read-only [ 104.072890][T11630] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 104.081181][T11630] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 104.203867][T11640] tmpfs: Unknown parameter 'n' [ 104.262275][T11646] syz.6.3218[11646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.262473][T11646] syz.6.3218[11646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.275048][T11646] syz.6.3218[11646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.335666][T11654] loop6: detected capacity change from 0 to 512 [ 104.366921][T11652] loop2: detected capacity change from 0 to 512 [ 104.373556][T11654] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.386145][T11652] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #32: comm syz.2.3221: iget: special inode unallocated [ 104.399278][T11652] EXT4-fs (loop2): Remounting filesystem read-only [ 104.407047][T11652] EXT4-fs (loop2): no journal found [ 104.412246][T11652] EXT4-fs (loop2): can't get journal size [ 104.418060][T11654] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3222: bg 0: block 248: padding at end of block bitmap is not set [ 104.433472][T11654] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3222: Failed to acquire dquot type 1 [ 104.446059][T11652] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 104.456675][T11652] EXT4-fs (loop2): failed to initialize system zone (-117) [ 104.464132][T11652] EXT4-fs (loop2): mount failed [ 104.469239][T11654] EXT4-fs (loop6): 1 truncate cleaned up [ 104.495130][T11654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.513716][T11654] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 104.544710][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 104.544725][ T29] audit: type=1400 audit(1734724947.612:2546): avc: denied { mount } for pid=11663 comm="syz.2.3226" name="/" dev="hugetlbfs" ino=30393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.582496][ T29] audit: type=1400 audit(1734724947.652:2547): avc: denied { unmount } for pid=5389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.604483][ T29] audit: type=1400 audit(1734724947.672:2548): avc: denied { create } for pid=11670 comm="syz.2.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.606325][T11671] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3229'. [ 104.648163][ T29] audit: type=1400 audit(1734724947.672:2549): avc: denied { write } for pid=11670 comm="syz.2.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.669075][ T29] audit: type=1400 audit(1734724947.672:2550): avc: denied { nlmsg_write } for pid=11670 comm="syz.2.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.709725][ T29] audit: type=1400 audit(1734724947.782:2551): avc: denied { override_creds } for pid=11675 comm="syz.0.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.770815][ T29] audit: type=1400 audit(1734724947.842:2552): avc: denied { connect } for pid=11689 comm="syz.2.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.818477][T11695] ALSA: seq fatal error: cannot create timer (-19) [ 104.875627][ T29] audit: type=1400 audit(1734724947.932:2553): avc: denied { audit_write } for pid=11699 comm="syz.5.3243" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.895504][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3244'. [ 104.898205][ T29] audit: type=1107 audit(1734724947.932:2554): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 104.919431][ T29] audit: type=1400 audit(1734724947.942:2555): avc: denied { ioctl } for pid=11701 comm="syz.2.3242" path="socket:[31117]" dev="sockfs" ino=31117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.112665][T11740] loop5: detected capacity change from 0 to 512 [ 105.130687][T11740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.141955][T11740] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.3262: bad orphan inode 131083 [ 105.157884][T11740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.170685][T11654] EXT4-fs warning (device loop6): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 105.170685][T11654] [ 105.237935][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.277768][ T6810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.334501][T11761] xt_CT: No such helper "snmp" [ 105.359137][T11764] loop0: detected capacity change from 0 to 512 [ 105.402649][T11764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.437710][T11764] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.493004][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.512526][T11776] loop2: detected capacity change from 0 to 256 [ 105.537315][T11776] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.550640][T11783] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 262148, id = 0 [ 105.577265][T11776] FAT-fs (loop2): Directory bread(block 64) failed [ 105.587333][T11776] FAT-fs (loop2): Directory bread(block 65) failed [ 105.602903][T11776] FAT-fs (loop2): Directory bread(block 66) failed [ 105.627128][T11776] FAT-fs (loop2): Directory bread(block 67) failed [ 105.646807][T11776] FAT-fs (loop2): Directory bread(block 68) failed [ 105.674601][T11776] FAT-fs (loop2): Directory bread(block 69) failed [ 105.688771][T11776] FAT-fs (loop2): Directory bread(block 70) failed [ 105.694653][T11793] syz.6.3285[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.695369][T11793] syz.6.3285[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.696192][T11776] FAT-fs (loop2): Directory bread(block 71) failed [ 105.728900][T11793] syz.6.3285[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.731937][T11776] FAT-fs (loop2): Directory bread(block 72) failed [ 105.753709][T11776] FAT-fs (loop2): Directory bread(block 73) failed [ 105.851397][T11805] netlink: 'syz.0.3291': attribute type 21 has an invalid length. [ 105.880217][T11805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3291'. [ 106.041464][T11815] veth0_to_team: entered promiscuous mode [ 106.062552][T11815] macsec1: entered allmulticast mode [ 106.067877][T11815] veth0_to_team: entered allmulticast mode [ 106.082619][T11719] kexec: Could not allocate control_code_buffer [ 106.105350][T11815] veth0_to_team: left allmulticast mode [ 106.110999][T11815] veth0_to_team: left promiscuous mode [ 106.330927][T11850] bond1: entered promiscuous mode [ 106.336021][T11850] bond1: entered allmulticast mode [ 106.341324][T11850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.352175][T11850] bond1 (unregistering): Released all slaves [ 106.514240][T11879] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3325'. [ 106.591172][ T24] hid (null): invalid report_count 25302 [ 106.600742][ T24] hid-generic 0040:0001:0007.0002: unknown main item tag 0xe [ 106.608212][ T24] hid-generic 0040:0001:0007.0002: unknown main item tag 0x2 [ 106.609653][T11896] loop2: detected capacity change from 0 to 2048 [ 106.615621][ T24] hid-generic 0040:0001:0007.0002: invalid report_count 25302 [ 106.615638][ T24] hid-generic 0040:0001:0007.0002: item 0 4 1 9 parsing failed [ 106.615733][ T24] hid-generic 0040:0001:0007.0002: probe with driver hid-generic failed with error -22 [ 106.736785][T11896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.762551][T11915] loop4: detected capacity change from 0 to 512 [ 106.782131][T11915] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3343: corrupted in-inode xattr: invalid ea_ino [ 106.799747][T11915] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3343: couldn't read orphan inode 15 (err -117) [ 106.827507][T11923] netlink: 'syz.0.3345': attribute type 7 has an invalid length. [ 106.842284][T11915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.865865][ T5389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.908491][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.145238][T11983] loop5: detected capacity change from 0 to 164 [ 107.304163][T12021] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3387'. [ 107.332472][T12005] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3387'. [ 107.391285][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'. [ 107.414347][T12030] loop2: detected capacity change from 0 to 512 [ 107.458394][T12030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.488579][T12030] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.511454][T12030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.559450][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3407'. [ 107.616778][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3412'. [ 107.651766][T12069] loop2: detected capacity change from 0 to 2048 [ 107.687136][T12069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.735955][ T5389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.822516][T12091] loop2: detected capacity change from 0 to 164 [ 107.834052][T12091] Unable to read rock-ridge attributes [ 107.842704][T12091] Unable to read rock-ridge attributes [ 107.849881][T12091] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 108.098039][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3449'. [ 108.230177][T12179] loop2: detected capacity change from 0 to 1764 [ 108.341589][T12199] loop6: detected capacity change from 0 to 2048 [ 108.359722][T12199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.393038][T12199] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.409549][T12199] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.421898][T12199] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.421898][T12199] [ 108.431679][T12199] EXT4-fs (loop6): Total free blocks count 0 [ 108.438987][T12199] EXT4-fs (loop6): Free/Dirty block details [ 108.445055][T12199] EXT4-fs (loop6): free_blocks=2415919104 [ 108.450862][T12199] EXT4-fs (loop6): dirty_blocks=32 [ 108.456048][T12199] EXT4-fs (loop6): Block reservation details [ 108.462028][T12199] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 108.487168][T12222] netlink: 'syz.0.3485': attribute type 13 has an invalid length. [ 108.497184][T12222] syz_tun: refused to change device tx_queue_len [ 108.503654][T12222] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 108.540327][ T5959] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 108.868770][T12281] macvlan0: entered allmulticast mode [ 108.874227][T12281] veth1_vlan: entered allmulticast mode [ 108.884370][T12281] macvlan0: left allmulticast mode [ 108.889665][T12281] veth1_vlan: left allmulticast mode [ 108.966424][T12292] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 108.996130][T12292] SELinux: failed to load policy [ 109.022154][T12299] loop0: detected capacity change from 0 to 512 [ 109.030331][T12299] EXT4-fs: Ignoring removed bh option [ 109.043895][T12299] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 109.087656][T12299] EXT4-fs (loop0): 1 truncate cleaned up [ 109.093699][T12299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.116877][T12314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12314 comm=syz.4.3528 [ 109.155297][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.203034][T12332] loop5: detected capacity change from 0 to 128 [ 109.232918][T12332] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.245532][T12332] ext4 filesystem being mounted at /497/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.304425][T12346] loop5: detected capacity change from 0 to 2048 [ 109.318708][T12354] SELinux: policydb string length 16 does not match expected length 8 [ 109.327134][T12354] SELinux: failed to load policy [ 109.386137][T12366] loop0: detected capacity change from 0 to 128 [ 109.448833][T12375] loop6: detected capacity change from 0 to 512 [ 109.480070][T12375] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.569709][T12402] loop5: detected capacity change from 0 to 2048 [ 109.588196][T12405] loop6: detected capacity change from 0 to 512 [ 109.596304][T12402] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 109.601520][T12402] loop5: partition table partially beyond EOD, truncated [ 109.614828][T12402] loop5: p1 size 33024 extends beyond EOD, truncated [ 109.630186][T12402] loop5: p2 start 16908804 is beyond EOD, truncated [ 109.636850][T12402] loop5: p3 start 4284289 is beyond EOD, truncated [ 109.649068][T12402] loop5: p5 size 33024 extends beyond EOD, truncated [ 109.660532][T12407] loop0: detected capacity change from 0 to 512 [ 109.668509][T12405] EXT4-fs (loop6): too many log groups per flexible block group [ 109.668940][T12407] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 109.676882][T12405] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 109.692994][T12405] EXT4-fs (loop6): mount failed [ 109.698017][T12402] loop5: p6 start 16908804 is beyond EOD, truncated [ 109.699398][T12416] loop2: detected capacity change from 0 to 256 [ 109.711383][T12416] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.727275][T12416] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.734716][T12407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 109.746954][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 109.746966][ T29] audit: type=1400 audit(1734724952.822:2783): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 109.777929][ T29] audit: type=1400 audit(1734724952.822:2784): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 109.803186][T12407] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.816382][T12407] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33619980: comm +}[@: invalid block [ 109.842174][ T29] audit: type=1400 audit(1734724952.912:2785): avc: denied { watch watch_reads } for pid=12415 comm="syz.2.3574" path="/558/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 109.867655][T12407] EXT4-fs (loop0): Remounting filesystem read-only [ 109.877256][T12407] EXT4-fs (loop0): 1 truncate cleaned up [ 109.885248][T12407] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 109.893643][T12424] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 109.901876][T12424] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 109.914966][T12422] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 109.921481][T12422] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.929743][T12422] vhci_hcd vhci_hcd.0: Device attached [ 109.943134][ T29] audit: type=1400 audit(1734724953.022:2786): avc: denied { sys_module } for pid=12431 comm="syz.5.3581" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 109.982443][T12425] vhci_hcd: connection closed [ 109.984730][ T11] vhci_hcd: stop threads [ 109.993673][ T11] vhci_hcd: release socket [ 109.999224][ T11] vhci_hcd: disconnect device [ 110.011188][ T29] audit: type=1400 audit(1734724953.082:2787): avc: denied { read } for pid=12439 comm="syz.2.3585" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.034978][ T29] audit: type=1400 audit(1734724953.082:2788): avc: denied { open } for pid=12439 comm="syz.2.3585" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.058684][ T29] audit: type=1400 audit(1734724953.082:2789): avc: denied { ioctl } for pid=12439 comm="syz.2.3585" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.117922][T12448] 9p: Unknown Cache mode or invalid value f [ 110.140277][T12455] netem: change failed [ 110.247663][ T29] audit: type=1400 audit(1734724953.322:2790): avc: denied { read } for pid=12478 comm="syz.2.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.297103][ T29] audit: type=1326 audit(1734724953.372:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.4.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be8155d29 code=0x7ffc0000 [ 110.320683][ T29] audit: type=1326 audit(1734724953.372:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.4.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be8155d29 code=0x7ffc0000 [ 110.370522][T12492] vhci_hcd: invalid port number 96 [ 110.376947][T12492] vhci_hcd: default hub control req: c306 v0079 i0060 l0 [ 110.417577][T12495] __nla_validate_parse: 13 callbacks suppressed [ 110.417592][T12495] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3609'. [ 110.432914][T12495] tc_dump_action: action bad kind [ 110.633070][T12532] binfmt_misc: register: failed to install interpreter file ./file0 [ 110.669643][T12538] SELinux: security policydb version 18 (MLS) not backwards compatible [ 110.679641][T12538] SELinux: failed to load policy [ 110.707953][T12543] hsr0: left promiscuous mode [ 110.972076][T12565] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3634'. [ 110.983189][T12555] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3634'. [ 111.113347][T12582] loop0: detected capacity change from 0 to 1024 [ 111.121164][T12582] EXT4-fs: Ignoring removed nobh option [ 111.127539][T12582] EXT4-fs: Ignoring removed bh option [ 111.155293][T12588] loop5: detected capacity change from 0 to 764 [ 111.162234][T12588] rock: directory entry would overflow storage [ 111.169267][T12588] rock: sig=0x4654, size=5, remaining=4 [ 111.221832][T12597] loop5: detected capacity change from 0 to 512 [ 111.229673][T12597] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.241255][T12597] EXT4-fs (loop5): 1 truncate cleaned up [ 111.288462][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 111.297631][T12605] netlink: 'syz.0.3657': attribute type 7 has an invalid length. [ 111.321968][T12609] loop0: detected capacity change from 0 to 256 [ 111.328635][T12609] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.344011][T12609] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.674990][T12638] loop4: detected capacity change from 0 to 256 [ 111.970211][T12666] loop4: detected capacity change from 0 to 2048 [ 112.034975][T12666] loop4: p3 < > p4 < > [ 112.039168][T12666] loop4: partition table partially beyond EOD, truncated [ 112.056487][T12666] loop4: p3 start 4284289 is beyond EOD, truncated [ 112.114612][T12678] loop4: detected capacity change from 0 to 256 [ 112.291819][T12700] loop6: detected capacity change from 0 to 1024 [ 112.526692][T12737] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.549717][T12700] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 112.565458][T12700] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 112.577738][T12700] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.577738][T12700] [ 112.587427][T12700] EXT4-fs (loop6): Total free blocks count 0 [ 112.593527][T12700] EXT4-fs (loop6): Free/Dirty block details [ 112.600052][T12700] EXT4-fs (loop6): free_blocks=68451041280 [ 112.605916][T12700] EXT4-fs (loop6): dirty_blocks=16 [ 112.611017][T12700] EXT4-fs (loop6): Block reservation details [ 112.617048][T12700] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 112.675945][T12751] loop9: detected capacity change from 0 to 1 [ 126.084515][T12762] loop4: detected capacity change from 0 to 128 [ 126.096349][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 126.096373][ T29] audit: type=1400 audit(1734725225.180:2874): avc: denied { mounton } for pid=12765 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 126.098226][T12762] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.113942][ T29] audit: type=1400 audit(1734725225.180:2875): avc: denied { create } for pid=12764 comm="syz.6.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.129911][T12762] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.168106][ T29] audit: type=1326 audit(1734725225.250:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.192288][ T29] audit: type=1326 audit(1734725225.250:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.231612][ T29] audit: type=1400 audit(1734725225.270:2878): avc: denied { connect } for pid=12764 comm="syz.6.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.252024][ T29] audit: type=1326 audit(1734725225.310:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.275633][ T29] audit: type=1326 audit(1734725225.310:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.299814][ T29] audit: type=1326 audit(1734725225.310:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.323372][ T29] audit: type=1326 audit(1734725225.310:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.347572][ T29] audit: type=1326 audit(1734725225.310:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dfe65d29 code=0x7ffc0000 [ 126.457372][T12798] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.519337][ T5959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.570423][ T5959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.588837][T12765] chnl_net:caif_netlink_parms(): no params data found [ 126.605743][T12813] loop5: detected capacity change from 0 to 256 [ 126.612776][T12813] msdos: Unknown parameter 'qy÷0M' [ 126.629916][ T5959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.668010][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.675221][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.690332][T12765] bridge_slave_0: entered allmulticast mode [ 126.701210][T12765] bridge_slave_0: entered promiscuous mode [ 126.723749][ T5959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.742721][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.749950][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.757457][T12765] bridge_slave_1: entered allmulticast mode [ 126.764183][T12765] bridge_slave_1: entered promiscuous mode [ 126.783559][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.794007][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.822131][T12839] loop4: detected capacity change from 0 to 256 [ 126.823020][T12765] team0: Port device team_slave_0 added [ 126.829420][T12839] msdos: Unknown parameter '"' [ 126.838228][T12765] team0: Port device team_slave_1 added [ 126.849544][ T5959] bridge_slave_1: left allmulticast mode [ 126.855317][ T5959] bridge_slave_1: left promiscuous mode [ 126.861127][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.869480][ T5959] bridge_slave_0: left promiscuous mode [ 126.875242][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.967942][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.978299][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.988471][ T5959] bond0 (unregistering): Released all slaves [ 127.008895][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.015986][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.043276][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.055071][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.062064][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.089389][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.128131][ T5959] hsr_slave_0: left promiscuous mode [ 127.145972][ T5959] hsr_slave_1: left promiscuous mode [ 127.156342][T12858] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 127.163997][ T3374] IPVS: starting estimator thread 0... [ 127.171225][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.180299][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.187840][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.202377][ T5959] bridge_slave_0: left allmulticast mode [ 127.209420][ T5959] veth0_macvtap: left promiscuous mode [ 127.214953][ T5959] veth1_vlan: left promiscuous mode [ 127.220241][ T5959] veth0_vlan: left promiscuous mode [ 127.254974][T12860] IPVS: using max 2784 ests per chain, 139200 per kthread [ 127.302454][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3778'. [ 127.392864][T12765] hsr_slave_0: entered promiscuous mode [ 127.409982][T12765] hsr_slave_1: entered promiscuous mode [ 127.419756][T12765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.430266][T12765] Cannot create hsr debugfs directory [ 127.524329][T12892] loop0: detected capacity change from 0 to 1024 [ 127.533794][T12892] EXT4-fs: Ignoring removed nobh option [ 127.536650][T12765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 127.539425][T12892] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.565999][T12765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 127.574098][T12892] EXT4-fs mount: 13 callbacks suppressed [ 127.574110][T12892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.580400][T12765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 127.601437][T12765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.648008][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.658511][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.674495][T12765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.684874][T12765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.700521][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.707659][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.744402][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.751537][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.760375][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.829004][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.996430][T12765] veth0_vlan: entered promiscuous mode [ 128.007041][T12765] veth1_vlan: entered promiscuous mode [ 128.032769][T12765] veth0_macvtap: entered promiscuous mode [ 128.057576][T12765] veth1_macvtap: entered promiscuous mode [ 128.077784][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.088966][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.098805][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.109258][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.119665][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.130101][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.140000][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.151197][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.161835][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.180913][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.191413][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.201293][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.212463][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.222594][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.233052][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.243650][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.254085][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.264622][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.280018][T12765] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.288789][T12765] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.298366][T12765] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.307139][T12765] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.667484][T12962] TCP: TCP_TX_DELAY enabled [ 128.751517][ T5925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.827857][ T5925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.907876][ T5925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.997918][ T5925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.086802][ T5925] bridge_slave_1: left allmulticast mode [ 129.092457][ T5925] bridge_slave_1: left promiscuous mode [ 129.098282][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.106361][ T5925] bridge_slave_0: left allmulticast mode [ 129.112004][ T5925] bridge_slave_0: left promiscuous mode [ 129.117681][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.326610][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.336527][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.346247][ T5925] bond0 (unregistering): Released all slaves [ 129.391618][ T5925] hsr_slave_0: left promiscuous mode [ 129.397355][ T5925] hsr_slave_1: left promiscuous mode [ 129.402932][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.410801][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.418534][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.426526][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.438797][ T5925] team_slave_0: left promiscuous mode [ 129.444255][ T5925] team_slave_1: left promiscuous mode [ 129.449738][ T5925] veth1_macvtap: left promiscuous mode [ 129.455248][ T5925] veth0_macvtap: left promiscuous mode [ 129.460699][ T5925] veth1_vlan: left promiscuous mode [ 129.466407][ T5925] veth0_vlan: left promiscuous mode [ 129.522948][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 129.532674][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 129.841648][T13012] chnl_net:caif_netlink_parms(): no params data found [ 129.871244][T13012] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.878374][T13012] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.886088][T13012] bridge_slave_0: entered allmulticast mode [ 129.892404][T13012] bridge_slave_0: entered promiscuous mode [ 129.899346][T13012] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.906497][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.913578][T13012] bridge_slave_1: entered allmulticast mode [ 129.919956][T13012] bridge_slave_1: entered promiscuous mode [ 129.934082][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.944064][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.962403][T13012] team0: Port device team_slave_0 added [ 129.968655][T13012] team0: Port device team_slave_1 added [ 129.982221][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.989512][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.015933][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.027176][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.034190][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.060630][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.084311][T13012] hsr_slave_0: entered promiscuous mode [ 130.090770][T13012] hsr_slave_1: entered promiscuous mode [ 130.096634][T13012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.104213][T13012] Cannot create hsr debugfs directory [ 130.377787][T13012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.387298][T13012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.395649][T13012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.403806][T13012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.416570][T13012] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.423588][T13012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.430878][T13012] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.437914][T13012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.457196][ T5943] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.482845][T13012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.500817][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.516280][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.531260][T13012] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.542122][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.549197][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.565745][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.572818][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.631128][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.689897][T13031] chnl_net:caif_netlink_parms(): no params data found [ 130.734992][T13031] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.742232][T13031] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.749914][T13031] bridge_slave_0: entered allmulticast mode [ 130.756389][T13031] bridge_slave_0: entered promiscuous mode [ 130.763282][T13031] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.770413][T13031] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.777641][T13031] bridge_slave_1: entered allmulticast mode [ 130.783827][T13031] bridge_slave_1: entered promiscuous mode [ 130.802984][T13012] veth0_vlan: entered promiscuous mode [ 130.809514][T13031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.820144][T13031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.840077][T13031] team0: Port device team_slave_0 added [ 130.846906][T13031] team0: Port device team_slave_1 added [ 130.862538][T13012] veth1_vlan: entered promiscuous mode [ 130.868562][T13031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.875643][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.901563][T13031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.912645][T13031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.919692][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.945621][T13031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.972908][T13031] hsr_slave_0: entered promiscuous mode [ 130.979454][T13031] hsr_slave_1: entered promiscuous mode [ 130.985429][T13031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.992957][T13031] Cannot create hsr debugfs directory [ 131.012041][T13012] veth0_macvtap: entered promiscuous mode [ 131.027740][T13012] veth1_macvtap: entered promiscuous mode [ 131.058255][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.068787][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.078646][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.089200][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.099101][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.109611][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.119422][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.129843][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.140545][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.151590][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.162056][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.171922][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.182410][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.192237][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.202670][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.212496][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.222964][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.233368][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.249766][T13012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.258513][T13012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.267262][T13012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.276624][T13012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.291828][T13031] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 131.300395][T13031] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 131.309115][T13031] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 131.318022][T13031] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 131.359208][T13031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.371478][T13031] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.381792][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.388920][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.399036][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.406131][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.463467][T13031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.565557][T13031] veth0_vlan: entered promiscuous mode [ 131.572857][T13031] veth1_vlan: entered promiscuous mode [ 131.586368][T13031] veth0_macvtap: entered promiscuous mode [ 131.594345][T13031] veth1_macvtap: entered promiscuous mode [ 131.605948][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.616458][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.626760][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.637213][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.647065][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.657998][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.667791][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.678186][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.688390][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.698783][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.709411][T13031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.719625][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.730245][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.740187][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.750643][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.760480][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.770917][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.780717][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.791127][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.800976][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.811492][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.837340][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 131.837356][ T29] audit: type=1326 audit(1734725230.920:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 131.847667][T13031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.913995][ T29] audit: type=1326 audit(1734725230.950:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 131.930223][T13031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.937607][ T29] audit: type=1326 audit(1734725230.950:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 131.937686][ T29] audit: type=1326 audit(1734725230.950:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13076 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 131.994964][T13031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.999703][ T29] audit: type=1326 audit(1734725231.080:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 132.003711][T13031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.003739][T13031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.044759][ T29] audit: type=1326 audit(1734725231.080:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 132.072639][ T29] audit: type=1326 audit(1734725231.120:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 132.096246][ T29] audit: type=1326 audit(1734725231.120:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 132.119785][ T29] audit: type=1326 audit(1734725231.120:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa4b5d29 code=0x7ffc0000 [ 132.179325][ T29] audit: type=1400 audit(1734725231.260:2993): avc: denied { bind } for pid=13093 comm="syz.6.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.209089][T13102] netlink: 'syz.8.3815': attribute type 21 has an invalid length. [ 132.224438][T13102] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3815'. [ 132.289036][ T5943] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.337226][ T5943] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.364164][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3834'. [ 132.373080][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3834'. [ 132.382473][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3834'. [ 132.413021][ T5943] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.497930][T13081] chnl_net:caif_netlink_parms(): no params data found [ 132.551443][T13078] chnl_net:caif_netlink_parms(): no params data found [ 132.578354][ T5943] bridge_slave_1: left allmulticast mode [ 132.584172][ T5943] bridge_slave_1: left promiscuous mode [ 132.590591][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.598805][ T5943] bridge_slave_0: left allmulticast mode [ 132.604534][ T5943] bridge_slave_0: left promiscuous mode [ 132.610222][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.697436][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.707378][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.716832][ T5943] bond0 (unregistering): Released all slaves [ 132.748701][T13081] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.755888][T13081] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.763157][T13081] bridge_slave_0: entered allmulticast mode [ 132.770556][T13081] bridge_slave_0: entered promiscuous mode [ 132.777651][T13081] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.784736][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.791930][T13081] bridge_slave_1: entered allmulticast mode [ 132.798376][T13081] bridge_slave_1: entered promiscuous mode [ 132.828629][ T5943] hsr_slave_0: left promiscuous mode [ 132.834283][ T5943] hsr_slave_1: left promiscuous mode [ 132.840120][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.847884][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.856348][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.863781][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.872336][ T5943] veth1_macvtap: left promiscuous mode [ 132.878237][ T5943] veth0_macvtap: left promiscuous mode [ 132.883761][ T5943] veth1_vlan: left promiscuous mode [ 132.889074][ T5943] veth0_vlan: left promiscuous mode [ 132.942311][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.950927][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 132.950959][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.965933][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 133.003927][T13081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.015638][T13081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.038500][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.045640][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.052847][T13078] bridge_slave_0: entered allmulticast mode [ 133.059293][T13078] bridge_slave_0: entered promiscuous mode [ 133.066239][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.073294][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.080469][T13078] bridge_slave_1: entered allmulticast mode [ 133.086895][T13078] bridge_slave_1: entered promiscuous mode [ 133.098127][T13081] team0: Port device team_slave_0 added [ 133.104558][T13081] team0: Port device team_slave_1 added [ 133.118015][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.137348][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.147569][T13081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.154522][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.180498][T13081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.198772][T13081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.205761][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.231826][T13081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.281331][T13078] team0: Port device team_slave_0 added [ 133.295926][T13081] hsr_slave_0: entered promiscuous mode [ 133.303517][T13081] hsr_slave_1: entered promiscuous mode [ 133.310570][T13081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.318198][T13081] Cannot create hsr debugfs directory [ 133.324053][T13078] team0: Port device team_slave_1 added [ 133.342137][T13150] loop8: detected capacity change from 0 to 512 [ 133.361761][T13150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.376860][T13150] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.397346][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.404355][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.430545][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.474516][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.481506][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.507481][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.526980][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.562520][T13078] hsr_slave_0: entered promiscuous mode [ 133.568955][T13078] hsr_slave_1: entered promiscuous mode [ 133.575669][T13078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.583251][T13078] Cannot create hsr debugfs directory [ 133.595862][ T5943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.626718][T13173] SELinux: Context Ü is not valid (left unmapped). [ 133.678059][T13081] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 133.699149][ T5943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.718909][T13081] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 133.758297][T13081] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 133.767235][T13081] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 133.776620][T13190] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.784443][T13190] IPv6: Can't replace route, no match found [ 133.795297][ T5943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.866239][ T5943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.906887][T13081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.919397][T13081] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.933189][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.940314][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.959203][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.966397][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.989602][ T5943] bridge_slave_1: left allmulticast mode [ 133.995390][ T5943] bridge_slave_1: left promiscuous mode [ 134.001064][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.008981][ T5943] bridge_slave_0: left allmulticast mode [ 134.015375][ T5943] bridge_slave_0: left promiscuous mode [ 134.021116][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.177002][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.186736][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.196192][ T5943] bond0 (unregistering): Released all slaves [ 134.203735][T13216] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.226446][ T5943] IPVS: stopping backup sync thread 11783 ... [ 134.241818][ T5943] hsr_slave_0: left promiscuous mode [ 134.248311][ T5943] hsr_slave_1: left promiscuous mode [ 134.253966][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.261472][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.270935][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.276815][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3872'. [ 134.279011][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.307171][ T5943] veth1_macvtap: left promiscuous mode [ 134.312715][ T5943] veth0_macvtap: left promiscuous mode [ 134.318337][ T5943] veth1_vlan: left promiscuous mode [ 134.323544][ T5943] veth0_vlan: left promiscuous mode [ 134.377230][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 134.387272][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 134.432268][T13078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.441572][T13078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.457509][T13078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.467839][T13078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.509238][T13081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.523318][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.535641][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.544890][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.551994][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.568687][T13078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.579091][T13078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.598863][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.606012][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.722958][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.745572][T13081] veth0_vlan: entered promiscuous mode [ 134.754760][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3877'. [ 134.773794][T13081] veth1_vlan: entered promiscuous mode [ 134.800955][T13081] veth0_macvtap: entered promiscuous mode [ 134.814426][T13081] veth1_macvtap: entered promiscuous mode [ 134.839261][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.849730][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.859604][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.870104][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.879950][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.890498][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.900316][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.910752][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.921493][T13081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.935654][T13078] veth0_vlan: entered promiscuous mode [ 134.949533][T13078] veth1_vlan: entered promiscuous mode [ 134.956791][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.967246][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.977067][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.987496][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.997462][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.007888][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.017805][T13081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.028335][T13081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.051302][T13081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.064116][T13078] veth0_macvtap: entered promiscuous mode [ 135.087034][T13078] veth1_macvtap: entered promiscuous mode [ 135.097822][T13081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.106564][T13081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.115309][T13081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.124145][T13081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.133242][T13272] binfmt_misc: register: failed to install interpreter file ./file0 [ 135.147856][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.158371][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.168211][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.178706][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.188570][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.199079][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.208916][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.219368][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.229208][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.231980][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3887'. [ 135.239650][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.241466][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.266533][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.277037][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.286943][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.297423][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.307267][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.317731][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.327604][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.338080][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.347915][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.358416][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.368866][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.392521][T13078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.401277][T13078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.410074][T13078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.418375][T13285] loop6: detected capacity change from 0 to 512 [ 135.418881][T13078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.473683][T13285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.489023][T13285] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.503579][T13292] sd 0:0:1:0: device reset [ 135.552306][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3825'. [ 135.578675][T13298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.579248][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.629012][T13303] loop1: detected capacity change from 0 to 4096 [ 135.643134][T13303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.683593][T13305] infiniband syz2: set active [ 135.688322][T13305] infiniband syz2: added veth0_to_bond [ 135.704995][T13305] RDS/IB: syz2: added [ 135.714948][T13305] smc: adding ib device syz2 with port count 1 [ 135.724776][T13305] smc: ib device syz2 port 1 has pnetid [ 135.985655][T13078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.024860][T13335] syzkaller1: entered promiscuous mode [ 136.030440][T13335] syzkaller1: entered allmulticast mode [ 136.895816][T13413] loop1: detected capacity change from 0 to 2048 [ 136.907240][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 136.907253][ T29] audit: type=1400 audit(1734725235.990:3091): avc: denied { write } for pid=13415 comm="syz.6.3947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 136.992707][T13430] macsec1: entered promiscuous mode [ 136.998000][T13430] macvlan0: entered promiscuous mode [ 137.057490][T13440] bpf_get_probe_write_proto: 3 callbacks suppressed [ 137.057507][T13440] syz.1.3959[13440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.070676][T13440] syz.1.3959[13440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.086571][T13440] syz.1.3959[13440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.110556][T13443] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 137.133908][T13443] SELinux: failed to load policy [ 137.139518][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3965'. [ 137.171298][T13459] loop8: detected capacity change from 0 to 1024 [ 137.172858][ T29] audit: type=1400 audit(1734725236.240:3092): avc: denied { write } for pid=13460 comm="syz.9.3969" name="raw" dev="proc" ino=4026533464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.183547][T13459] EXT4-fs: Ignoring removed nobh option [ 137.226051][T13459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.248469][ T29] audit: type=1326 audit(1734725236.330:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.255112][T13459] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.283547][T13459] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #11: comm syz.8.3968: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 137.302293][T13459] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3968: couldn't read orphan inode 11 (err -117) [ 137.310276][ T29] audit: type=1326 audit(1734725236.360:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.337656][ T29] audit: type=1326 audit(1734725236.360:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.341843][T13459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.361286][ T29] audit: type=1326 audit(1734725236.360:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.397317][ T29] audit: type=1326 audit(1734725236.360:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.421769][ T29] audit: type=1326 audit(1734725236.480:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.445287][ T29] audit: type=1326 audit(1734725236.480:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.468800][ T29] audit: type=1326 audit(1734725236.510:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.9.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 137.546048][T13459] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3968: Invalid block bitmap block 0 in block_group 0 [ 137.564972][T13459] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3968: Failed to acquire dquot type 0 [ 137.618412][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.635669][ T5904] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:20: Failed to release dquot type 0 [ 137.777547][T13518] loop6: detected capacity change from 0 to 512 [ 137.784515][T13518] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.793637][T13518] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 137.803631][T13518] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 137.824395][T13518] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 137.835843][T13518] System zones: 0-2, 18-18, 34-34 [ 137.852935][T13518] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 137.867957][T13525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3999'. [ 137.877402][T13525] unsupported nlmsg_type 40 [ 137.894739][T13518] EXT4-fs (loop6): 1 truncate cleaned up [ 137.929845][T13518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.998978][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.261595][T13567] bridge_slave_0: default FDB implementation only supports local addresses [ 138.305235][T13574] loop6: detected capacity change from 0 to 512 [ 138.314061][T13574] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.367011][T13574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.395522][T13574] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.4020: corrupted inode contents [ 138.417488][T13574] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.4020: mark_inode_dirty error [ 138.455456][T13574] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.4020: corrupted inode contents [ 138.488055][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.662083][T13628] syz.6.4044[13628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.662187][T13628] syz.6.4044[13628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.683824][T13628] syz.6.4044[13628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.696651][T13631] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 138.839337][T13649] pimreg: entered allmulticast mode [ 138.846850][T13649] pimreg: left allmulticast mode [ 138.852964][T13653] 9pnet_fd: Insufficient options for proto=fd [ 139.003865][T13677] loop1: detected capacity change from 0 to 1764 [ 139.004081][T13679] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4069'. [ 139.153606][T13700] loop6: detected capacity change from 0 to 2048 [ 139.163937][T13703] loop1: detected capacity change from 0 to 256 [ 139.191809][T13711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.195026][T13700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.200327][T13711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.220985][T13703] FAT-fs (loop1): Directory bread(block 64) failed [ 139.227692][T13703] FAT-fs (loop1): Directory bread(block 65) failed [ 139.234236][T13703] FAT-fs (loop1): Directory bread(block 66) failed [ 139.240999][T13703] FAT-fs (loop1): Directory bread(block 67) failed [ 139.247596][T13703] FAT-fs (loop1): Directory bread(block 68) failed [ 139.254189][T13703] FAT-fs (loop1): Directory bread(block 69) failed [ 139.260967][T13703] FAT-fs (loop1): Directory bread(block 70) failed [ 139.266978][T13700] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.267664][T13703] FAT-fs (loop1): Directory bread(block 71) failed [ 139.288838][T13703] FAT-fs (loop1): Directory bread(block 72) failed [ 139.295434][T13703] FAT-fs (loop1): Directory bread(block 73) failed [ 139.334272][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4084'. [ 139.341497][T13703] syz.1.4077: attempt to access beyond end of device [ 139.341497][T13703] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 139.366785][T13703] syz.1.4077: attempt to access beyond end of device [ 139.366785][T13703] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 139.381943][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.397397][T13717] netlink: 'syz.9.4087': attribute type 13 has an invalid length. [ 139.405257][T13717] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4087'. [ 139.426016][T13717] syz_tun: refused to change device tx_queue_len [ 139.432376][T13717] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 139.558314][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.566954][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.610281][T13742] netlink: 'syz.1.4098': attribute type 10 has an invalid length. [ 139.618752][T13742] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.626076][T13742] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.636563][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.643623][T13742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.650963][T13742] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.658088][T13742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.666885][T13742] team0: Port device bridge0 added [ 139.782937][T13756] tmpfs: Unknown parameter 'kfree' [ 139.891172][T13776] loop9: detected capacity change from 0 to 2048 [ 139.912657][T13779] loop1: detected capacity change from 0 to 512 [ 139.922553][T13779] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.945113][T13776] loop9: p1 < > p4 [ 139.945733][T13779] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 139.949936][T13776] loop9: p4 size 8388608 extends beyond EOD, truncated [ 139.957002][T13779] System zones: 0-2, 18-18, 34-35 [ 139.969686][T13779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.008378][T13779] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.4115: path /63/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 140.033483][T13779] EXT4-fs (loop1): Remounting filesystem read-only [ 140.529566][T13840] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4142'. [ 140.591646][T13844] Invalid ELF header magic: != ELF [ 140.732835][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4152'. [ 140.741836][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4152'. [ 140.750863][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4152'. [ 140.780684][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4152'. [ 140.858857][T13872] loop6: detected capacity change from 0 to 256 [ 140.894357][T13078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.025133][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.034643][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.187973][T13900] binfmt_misc: register: failed to install interpreter file ./file0 [ 141.652126][T13967] bond1: entered promiscuous mode [ 141.657289][T13967] bond1: entered allmulticast mode [ 141.666321][T13975] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 141.674778][T13967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.719900][T13980] syzkaller1: entered allmulticast mode [ 141.755361][T13988] netlink: 'syz.8.4211': attribute type 10 has an invalid length. [ 141.767114][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.774327][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.818512][T13988] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.825615][T13988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.832900][T13988] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.840388][T13988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.850426][T13997] loop1: detected capacity change from 0 to 256 [ 141.860344][T13988] team0: Port device bridge0 added [ 141.904944][T14004] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 141.921905][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 141.921921][ T29] audit: type=1326 audit(1734725240.990:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 141.953142][ T29] audit: type=1326 audit(1734725241.030:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 141.976899][ T29] audit: type=1326 audit(1734725241.030:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.9.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 142.022445][ T29] audit: type=1326 audit(1734725241.060:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.046054][ T29] audit: type=1326 audit(1734725241.060:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.069600][ T29] audit: type=1326 audit(1734725241.060:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.074516][T14010] bond1: entered promiscuous mode [ 142.093153][ T29] audit: type=1326 audit(1734725241.060:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.098159][T14010] bond1: entered allmulticast mode [ 142.100444][T14010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.121709][ T29] audit: type=1326 audit(1734725241.060:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.157033][ T29] audit: type=1326 audit(1734725241.060:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.180574][ T29] audit: type=1326 audit(1734725241.060:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14005 comm="syz.1.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68fc05d29 code=0x7ffc0000 [ 142.231946][T14024] syzkaller1: entered allmulticast mode [ 142.278424][T14033] loop8: detected capacity change from 0 to 256 [ 142.424791][T14061] loop8: detected capacity change from 0 to 1024 [ 142.432117][T14061] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 142.447577][T14061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.464163][T14061] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.8.4243: corrupted in-inode xattr: bad magic number in in-inode xattr [ 142.491472][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.495797][T14071] syz.6.4248[14071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.500547][T14071] syz.6.4248[14071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.512229][T14071] syz.6.4248[14071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.661027][T14082] loop6: detected capacity change from 0 to 1024 [ 142.679525][T14082] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 142.698474][T14082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.723972][T14082] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.6.4262: corrupted in-inode xattr: bad magic number in in-inode xattr [ 142.752243][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.783711][T14096] loop6: detected capacity change from 0 to 128 [ 142.791537][T14096] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.804088][T14096] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.824577][ T9026] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.142129][T14157] loop9: detected capacity change from 0 to 512 [ 143.150189][T14157] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 143.172827][T14157] EXT4-fs (loop9): 1 truncate cleaned up [ 143.183830][T14157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.203860][T14157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.212449][T14166] syzkaller1: entered promiscuous mode [ 143.218407][T14166] syzkaller1: entered allmulticast mode [ 143.602685][T14228] loop9: detected capacity change from 0 to 512 [ 143.611166][T14228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.641049][T14228] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 143.641066][T14228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 143.641117][T14228] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.641351][T14228] EXT4-fs (loop9): orphan cleanup on readonly fs [ 143.641386][T14228] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 143.641412][T14228] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 143.650970][T14228] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4319: bg 0: block 40: padding at end of block bitmap is not set [ 143.651301][T14228] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.651903][T14228] EXT4-fs (loop9): 1 truncate cleaned up [ 143.652199][T14228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.680326][T13081] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.721552][T14234] loop1: detected capacity change from 0 to 512 [ 143.756773][T14234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.756870][T14234] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.817324][T13078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.891207][T14245] bridge_slave_0: left allmulticast mode [ 143.897011][T14245] bridge_slave_0: left promiscuous mode [ 143.902820][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.916513][T14245] bridge_slave_1: left allmulticast mode [ 143.922189][T14245] bridge_slave_1: left promiscuous mode [ 143.927912][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.953699][T14245] bond0: (slave bond_slave_0): Releasing backup interface [ 143.972946][T14245] bond0: (slave bond_slave_1): Releasing backup interface [ 143.997979][T14245] team0: Port device team_slave_0 removed [ 144.018003][T14245] team0: Port device team_slave_1 removed [ 144.032220][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.039749][T14245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.058877][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.066341][T14245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.320197][T14295] __nla_validate_parse: 10 callbacks suppressed [ 144.320213][T14295] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4349'. [ 144.482188][T14314] loop6: detected capacity change from 0 to 512 [ 144.524227][T14314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.557433][T14314] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.586915][T14331] sit0: entered promiscuous mode [ 144.603229][T14331] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 144.611092][T14331] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4363'. [ 144.633450][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.731678][T14354] loop1: detected capacity change from 0 to 512 [ 144.757069][T14354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.805697][T14354] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 144.813653][T14354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 144.826795][T14354] System zones: 0-1, 15-15, 18-18, 34-34 [ 144.832664][T14354] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.833311][T14368] loop9: detected capacity change from 0 to 1024 [ 144.839727][T14354] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.860052][T14354] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 144.862022][T14368] EXT4-fs: test_dummy_encryption option not supported [ 144.882041][T14369] loop6: detected capacity change from 0 to 128 [ 144.888357][T14354] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4375: bg 0: block 40: padding at end of block bitmap is not set [ 144.903483][T14354] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 144.913345][T14354] EXT4-fs (loop1): 1 truncate cleaned up [ 144.913916][T14375] Process accounting resumed [ 144.923338][T14354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.957039][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 144.964860][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 144.972622][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 144.980832][ T3376] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.011778][T13078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.021705][T14385] loop9: detected capacity change from 0 to 512 [ 145.028778][T14385] EXT4-fs: inline encryption not supported [ 145.059562][T14385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.078756][T14385] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.099492][T14385] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.134839][T14385] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.4387: mark_inode_dirty error [ 145.150677][T14385] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.156573][T14393] syz.6.4391[14393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.162470][T14393] syz.6.4391[14393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.175237][T14396] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.175464][T14393] syz.6.4391[14393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.208699][T14396] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.4387: mark_inode_dirty error [ 145.266265][T14396] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.288469][T14396] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.4387: mark_inode_dirty error [ 145.293260][T14409] loop8: detected capacity change from 0 to 1764 [ 145.309084][T14409] ISOFS: unable to read i-node block [ 145.310067][T14411] syz.3.4400: attempt to access beyond end of device [ 145.310067][T14411] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.314372][T14409] isofs_fill_super: get root inode failed [ 145.327771][T14396] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.348460][T14396] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.4387: mark_inode_dirty error [ 145.363536][T14385] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.4387: corrupted inode contents [ 145.407136][T13081] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.416802][T14421] loop8: detected capacity change from 0 to 2048 [ 145.428501][T14421] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.451607][T14424] syz.1.4416: attempt to access beyond end of device [ 145.451607][T14424] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.479400][T14421] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.494589][T14421] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4403: bg 0: block 234: padding at end of block bitmap is not set [ 145.509312][T14421] EXT4-fs (loop8): Remounting filesystem read-only [ 145.528125][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.615243][T14448] batadv_slave_1: entered promiscuous mode [ 145.621694][T14447] batadv_slave_1: left promiscuous mode [ 145.651413][ T3441] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 145.659388][ T3441] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 145.668249][ T3441] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 145.676592][ T3441] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.772065][T14464] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.779691][T14464] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 145.802888][T14469] netlink: 'syz.9.4425': attribute type 1 has an invalid length. [ 145.974903][T14485] SELinux: policydb version 0 does not match my version range 15-33 [ 145.986954][T14485] SELinux: failed to load policy [ 146.054195][T14493] syz.8.4435[14493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.054323][T14493] syz.8.4435[14493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.067928][T14493] syz.8.4435[14493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.109827][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4439'. [ 146.147108][T14500] loop8: detected capacity change from 0 to 512 [ 146.192337][T14500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.207584][T14500] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.302995][T14518] loop1: detected capacity change from 0 to 1024 [ 146.319142][T14518] EXT4-fs: test_dummy_encryption option not supported [ 146.572154][T14535] syz.3.4456: attempt to access beyond end of device [ 146.572154][T14535] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 146.612588][T14537] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 146.764116][T14557] syz.9.4467: attempt to access beyond end of device [ 146.764116][T14557] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 146.844036][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4474'. [ 146.872627][T14575] SELinux: policydb version 0 does not match my version range 15-33 [ 146.880966][T14575] SELinux: failed to load policy [ 146.917210][T14583] netlink: 'syz.6.4478': attribute type 1 has an invalid length. [ 146.943658][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 146.943670][ T29] audit: type=1400 audit(1734725246.020:3578): avc: denied { read } for pid=14586 comm="syz.6.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.988666][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.024351][ T29] audit: type=1326 audit(1734725246.100:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.062879][ T29] audit: type=1326 audit(1734725246.130:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.086465][ T29] audit: type=1326 audit(1734725246.130:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.109955][ T29] audit: type=1326 audit(1734725246.130:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.133606][ T29] audit: type=1326 audit(1734725246.130:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.157182][ T29] audit: type=1326 audit(1734725246.130:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.180943][ T29] audit: type=1326 audit(1734725246.130:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.181454][T14602] loop9: detected capacity change from 0 to 2048 [ 147.204457][ T29] audit: type=1326 audit(1734725246.130:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.234339][ T29] audit: type=1326 audit(1734725246.130:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.9.4485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bddaa5d29 code=0x7ffc0000 [ 147.263216][T14599] bond1: entered promiscuous mode [ 147.268357][T14599] bond1: entered allmulticast mode [ 147.280521][T14602] Alternate GPT is invalid, using primary GPT. [ 147.287027][T14602] loop9: p2 p3 p7 [ 147.291783][T14599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.311314][T14599] bond1 (unregistering): Released all slaves [ 147.360706][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.369326][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.508388][T14617] syz.6.4494: attempt to access beyond end of device [ 147.508388][T14617] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.649968][T14646] syz.8.4508: attempt to access beyond end of device [ 147.649968][T14646] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.678529][T14651] random: crng reseeded on system resumption [ 147.916014][T14667] syz.3.4517[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.916061][T14667] syz.3.4517[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.927635][T14667] syz.3.4517[14667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.139163][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4535'. [ 148.412431][T14718] loop6: detected capacity change from 0 to 512 [ 148.420436][T14718] EXT4-fs (loop6): orphan cleanup on readonly fs [ 148.427222][T14718] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 148.446611][T14718] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 148.453380][T14718] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.4540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 148.471783][T14718] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4540: couldn't read orphan inode 13 (err -117) [ 148.486203][T14718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.507222][T14718] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 148.517775][T14718] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 2 [ 148.581880][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.633740][T14743] loop8: detected capacity change from 0 to 1024 [ 148.663978][T14745] loop6: detected capacity change from 0 to 512 [ 148.676762][T14743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.690395][T14745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.722136][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.734754][T14745] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.813714][T14765] loop1: detected capacity change from 0 to 512 [ 148.821723][T14765] journal_path: Lookup failure for './file1' [ 148.827796][T14765] EXT4-fs: error: could not find journal device path [ 149.079193][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4576'. [ 149.171103][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4586'. [ 149.210265][T14816] netlink: 'syz.8.4587': attribute type 1 has an invalid length. [ 149.218145][T14816] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4587'. [ 149.491570][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.540817][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.551862][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.606636][T14876] loop8: detected capacity change from 0 to 512 [ 149.608546][T14878] loop9: detected capacity change from 0 to 1024 [ 149.613264][T14876] journal_path: Lookup failure for './file1' [ 149.625380][T14876] EXT4-fs: error: could not find journal device path [ 149.636227][T14878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.662374][T13081] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.718463][T14890] loop9: detected capacity change from 0 to 512 [ 149.728355][T14886] hub 6-0:1.0: USB hub found [ 149.733006][T14886] hub 6-0:1.0: 8 ports detected [ 149.739712][T14890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.752346][T14890] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.790283][T14896] syz.8.4622[14896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.790321][T14896] syz.8.4622[14896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.801920][T14896] syz.8.4622[14896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.207622][T14929] loop8: detected capacity change from 0 to 1024 [ 150.239002][T14929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.267672][T13031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.409554][T14960] loop6: detected capacity change from 0 to 512 [ 150.419079][T14960] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.4653: casefold flag without casefold feature [ 150.432353][T14960] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4653: couldn't read orphan inode 15 (err -117) [ 150.445053][T14960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.505704][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.526559][T14972] loop6: detected capacity change from 0 to 128 [ 150.542213][T14972] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 150.560271][T14972] syz.6.4657: attempt to access beyond end of device [ 150.560271][T14972] loop6: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 150.574046][T14972] syz.6.4657: attempt to access beyond end of device [ 150.574046][T14972] loop6: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 150.575066][T13081] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.748906][T14998] syz.3.4679[14998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.749044][T14998] syz.3.4679[14998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.760556][T14998] syz.3.4679[14998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.846064][T15005] bridge0: port 1(dummy0) entered blocking state [ 150.863882][T15005] bridge0: port 1(dummy0) entered disabled state [ 150.868802][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.870399][T15005] dummy0: entered allmulticast mode [ 150.880248][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.884548][T15005] dummy0: entered promiscuous mode [ 150.897485][T15005] bridge0: port 1(dummy0) entered blocking state [ 150.903893][T15005] bridge0: port 1(dummy0) entered forwarding state [ 151.060758][T15021] ================================================================== [ 151.068875][T15021] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 151.076884][T15021] [ 151.079202][T15021] write to 0xffff888116898274 of 4 bytes by task 15022 on cpu 1: [ 151.086919][T15021] rxrpc_input_call_event+0x8ef/0x12e0 [ 151.092385][T15021] rxrpc_io_thread+0x30e/0x1fb0 [ 151.097246][T15021] kthread+0x1d1/0x210 [ 151.101402][T15021] ret_from_fork+0x4b/0x60 [ 151.105813][T15021] ret_from_fork_asm+0x1a/0x30 [ 151.110577][T15021] [ 151.112892][T15021] read to 0xffff888116898274 of 4 bytes by task 15021 on cpu 0: [ 151.120511][T15021] rxrpc_send_data+0x889/0x1820 [ 151.125377][T15021] rxrpc_do_sendmsg+0xb92/0xc30 [ 151.130229][T15021] rxrpc_sendmsg+0x417/0x520 [ 151.134817][T15021] __sock_sendmsg+0x140/0x180 [ 151.139493][T15021] ____sys_sendmsg+0x312/0x410 [ 151.144252][T15021] __sys_sendmsg+0x19d/0x230 [ 151.148840][T15021] __x64_sys_sendmsg+0x46/0x50 [ 151.153595][T15021] x64_sys_call+0x2734/0x2dc0 [ 151.158268][T15021] do_syscall_64+0xc9/0x1c0 [ 151.162758][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.168650][T15021] [ 151.170961][T15021] value changed: 0x00000000 -> 0x00000001 [ 151.176660][T15021] [ 151.178967][T15021] Reported by Kernel Concurrency Sanitizer on: [ 151.185110][T15021] CPU: 0 UID: 0 PID: 15021 Comm: syz.3.4680 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 151.195861][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 151.205921][T15021] ==================================================================