last executing test programs: 1m21.764872847s ago: executing program 32 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) 1m18.730069206s ago: executing program 2 (id=602): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0xf, "f85b33bc55"}, 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m18.660610238s ago: executing program 2 (id=605): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x124) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r2, 0x2007ffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x3, 0x1, 0x5, 0x53000000}) 1m18.52180277s ago: executing program 2 (id=610): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m18.424991782s ago: executing program 2 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m18.394411333s ago: executing program 2 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x100}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) 1m18.147635438s ago: executing program 2 (id=630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m18.132293098s ago: executing program 33 (id=630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 47.355457357s ago: executing program 6 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setresuid(0x0, 0x0, 0x0) 47.341027088s ago: executing program 6 (id=1424): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 46.451638565s ago: executing program 6 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 46.451459975s ago: executing program 6 (id=1460): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 46.197077s ago: executing program 6 (id=1471): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) getgroups(0x0, 0x0) 45.735773099s ago: executing program 6 (id=1498): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 45.68404763s ago: executing program 34 (id=1498): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 35.663102805s ago: executing program 3 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 35.647416905s ago: executing program 3 (id=1908): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.572979997s ago: executing program 3 (id=1909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeef, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file3\x00', 0x0, 0x802e00, 0x0) 35.507774758s ago: executing program 3 (id=1910): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x8000000000000001, 0x0, 0x2}) 35.494921138s ago: executing program 3 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 34.692034824s ago: executing program 3 (id=1937): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@multicast2, 0x2}, {@local, 0x200}, {@multicast1, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) 34.691911424s ago: executing program 35 (id=1937): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@multicast2, 0x2}, {@local, 0x200}, {@multicast1, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) 27.113640272s ago: executing program 7 (id=2203): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 27.072334633s ago: executing program 7 (id=2207): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 26.939238136s ago: executing program 7 (id=2221): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 26.918592346s ago: executing program 7 (id=2223): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 26.789702778s ago: executing program 7 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e50002"], 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 26.547609613s ago: executing program 7 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 26.547359543s ago: executing program 36 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 8.137210242s ago: executing program 4 (id=2577): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x23500d8, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 8.071227443s ago: executing program 4 (id=2582): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 8.024406924s ago: executing program 4 (id=2584): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0x0, 0x11ff, &(0x7f0000002480)="$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") fsopen(&(0x7f00000022c0)='hugetlbfs\x00', 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 7.736725739s ago: executing program 4 (id=2599): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 6.811124567s ago: executing program 4 (id=2591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 6.20532399s ago: executing program 4 (id=2623): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_gettime(0x0, &(0x7f0000000140)) 6.18723155s ago: executing program 37 (id=2623): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_gettime(0x0, &(0x7f0000000140)) 2.04163633s ago: executing program 9 (id=2711): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(r2, 0x5, 0x4) 2.021726571s ago: executing program 9 (id=2713): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.669421088s ago: executing program 8 (id=2724): r0 = syz_clone(0xac201300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) wait4(r0, 0xfffffffffffffffe, 0x80000000, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x2003516, 0x0, 0x0, 0x0, 0x0) 1.262545556s ago: executing program 8 (id=2725): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.171867337s ago: executing program 9 (id=2727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 1.003955621s ago: executing program 8 (id=2728): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x66842, 0xa) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1.003425771s ago: executing program 9 (id=2739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x3d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 935.271082ms ago: executing program 9 (id=2732): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 809.760194ms ago: executing program 1 (id=2735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) dup(r0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 749.495585ms ago: executing program 9 (id=2736): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = eventfd2(0x4, 0x0) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/207, 0xcf}], 0x1) 716.747376ms ago: executing program 5 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x419}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048841}, 0x0) 704.318847ms ago: executing program 1 (id=2741): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4}) 681.559007ms ago: executing program 1 (id=2742): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e6574"], 0x60}}, 0x0) 627.818818ms ago: executing program 0 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ff9}]}) getpriority(0x0, 0x0) 627.724738ms ago: executing program 5 (id=2745): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 595.730188ms ago: executing program 0 (id=2746): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 595.602229ms ago: executing program 5 (id=2747): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 566.696419ms ago: executing program 1 (id=2748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 537.91212ms ago: executing program 0 (id=2749): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 363.015913ms ago: executing program 0 (id=2750): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x24a, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 316.501754ms ago: executing program 1 (id=2751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 206.259086ms ago: executing program 0 (id=2752): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) dup(r0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 206.168466ms ago: executing program 5 (id=2753): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4}) 206.049906ms ago: executing program 1 (id=2754): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78a", 0x48) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 147.261428ms ago: executing program 0 (id=2755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x419}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048841}, 0x0) 147.066757ms ago: executing program 5 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x82}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 53.486459ms ago: executing program 8 (id=2757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ff9}]}) getpriority(0x0, 0x0) 48.116009ms ago: executing program 5 (id=2758): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e6574"], 0x60}}, 0x0) 15.95652ms ago: executing program 8 (id=2759): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 0s ago: executing program 8 (id=2760): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7105056b03018287b16091d3455701070347d9e55c0140"], 0x17) kernel console output (not intermixed with test programs): 80.281820][ T7139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.331071][ T7152] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.342571][ T7152] FAT-fs (loop11): unable to read boot sector [ 80.348993][ T7139] loop6: detected capacity change from 512 to 0 [ 80.359155][ C1] I/O error, dev loop6, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 80.373655][ T7155] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.1460: reading directory lblock 0 [ 80.400186][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 80.409915][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 80.419559][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.429648][ T7155] EXT4-fs (loop6): I/O error while writing superblock [ 80.451657][ C1] I/O error, dev loop6, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 80.461198][ T5586] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 80.477500][ C1] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 80.487310][ C1] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 80.497480][ T5586] EXT4-fs error (device loop6): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 80.510711][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 80.520236][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 80.529707][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.538136][ T5586] EXT4-fs (loop6): I/O error while writing superblock [ 80.544953][ T5586] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: IO failure [ 80.582004][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 80.591528][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.604916][ T7168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.618602][ T5586] EXT4-fs (loop6): I/O error while writing superblock [ 80.625602][ T5586] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 80.646656][ T7168] wireguard0: entered promiscuous mode [ 80.652199][ T7168] wireguard0: entered allmulticast mode [ 80.661523][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.669967][ T5586] EXT4-fs (loop6): I/O error while writing superblock [ 80.687618][ T144] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 80.702526][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.710870][ T144] EXT4-fs (loop6): I/O error while writing superblock [ 80.722796][ T5586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.736370][ T7180] loop3: detected capacity change from 0 to 164 [ 80.743585][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 80.751933][ T5586] EXT4-fs (loop6): I/O error while writing superblock [ 80.759128][ T7180] ISOFS: unable to read i-node block [ 80.764442][ T7180] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.999588][ T7228] dummy0: left allmulticast mode [ 81.004712][ T7228] dummy0: left promiscuous mode [ 81.009974][ T7228] bridge0: port 3(dummy0) entered disabled state [ 81.018295][ T7228] bridge_slave_1: left allmulticast mode [ 81.023954][ T7228] bridge_slave_1: left promiscuous mode [ 81.029729][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.037880][ T7228] bridge_slave_0: left allmulticast mode [ 81.043647][ T7228] bridge_slave_0: left promiscuous mode [ 81.049576][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.188636][ T7239] FAT-fs (loop7): unable to read boot sector [ 81.313654][ T7229] chnl_net:caif_netlink_parms(): no params data found [ 81.331136][ T7249] loop3: detected capacity change from 0 to 128 [ 81.353618][ T7249] EXT4-fs: Ignoring removed nobh option [ 81.361468][ T7249] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.374037][ T7249] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.390744][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.397834][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.414533][ T7229] bridge_slave_0: entered allmulticast mode [ 81.422264][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.437670][ T7229] bridge_slave_0: entered promiscuous mode [ 81.470032][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.477206][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.508198][ T7229] bridge_slave_1: entered allmulticast mode [ 81.522806][ T7229] bridge_slave_1: entered promiscuous mode [ 81.548003][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.572420][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.598802][ T7229] team0: Port device team_slave_0 added [ 81.608246][ T7229] team0: Port device team_slave_1 added [ 81.637975][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.645099][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.671512][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.718868][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.720987][ T7276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.725943][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.761185][ T7278] loop4: detected capacity change from 0 to 1024 [ 81.764589][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.800329][ T7278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.801881][ T7229] hsr_slave_0: entered promiscuous mode [ 81.825389][ T7278] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 81.828574][ T7229] hsr_slave_1: entered promiscuous mode [ 81.903931][ T5534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.924723][ T7289] SELinux: failed to load policy [ 81.938214][ T7229] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 81.947708][ T7229] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 81.957062][ T7229] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 81.969309][ T7229] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 81.991707][ T7296] netlink: 'syz.0.1525': attribute type 3 has an invalid length. [ 82.019592][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.033917][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.047658][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.054845][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.089090][ T7229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.099768][ T7229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.117587][ T7314] loop4: detected capacity change from 0 to 764 [ 82.127127][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.134218][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.181491][ T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.195911][ T7324] random: crng reseeded on system resumption [ 82.229296][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.237121][ T7326] loop4: detected capacity change from 0 to 1024 [ 82.260053][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.274468][ T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.316205][ T5534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.371138][ T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.422582][ T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.507130][ T144] bridge_slave_1: left allmulticast mode [ 82.512881][ T144] bridge_slave_1: left promiscuous mode [ 82.518655][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.530416][ T144] bridge_slave_0: left allmulticast mode [ 82.536111][ T144] bridge_slave_0: left promiscuous mode [ 82.541855][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.619516][ T144] smc: removing net device bond0 with user defined pnetid SYZ2 [ 82.627853][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.638464][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.648662][ T144] bond0 (unregistering): Released all slaves [ 82.657417][ T7229] veth0_vlan: entered promiscuous mode [ 82.663961][ T7366] netlink: 'syz.4.1555': attribute type 3 has an invalid length. [ 82.672970][ T7366] netlink: 'syz.4.1555': attribute type 3 has an invalid length. [ 82.683936][ T7229] veth1_vlan: entered promiscuous mode [ 82.698413][ T7229] veth0_macvtap: entered promiscuous mode [ 82.705436][ T7229] veth1_macvtap: entered promiscuous mode [ 82.716238][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.729465][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.739956][ T144] hsr_slave_0: left promiscuous mode [ 82.745619][ T144] hsr_slave_1: left promiscuous mode [ 82.751628][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.759149][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.767871][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.775732][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.785676][ T144] veth1_macvtap: left promiscuous mode [ 82.791339][ T144] veth0_macvtap: left promiscuous mode [ 82.796795][ T144] veth1_vlan: left promiscuous mode [ 82.802230][ T144] veth0_vlan: left promiscuous mode [ 82.852853][ T144] team0 (unregistering): Port device team_slave_1 removed [ 82.863039][ T144] team0 (unregistering): Port device team_slave_0 removed [ 82.895691][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906143][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916050][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.925183][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.074883][ T7390] loop7: detected capacity change from 0 to 512 [ 83.096518][ T7390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.103567][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 83.103583][ T29] audit: type=1400 audit(1757102290.355:2142): avc: denied { write } for pid=7394 comm="syz.4.1550" path="socket:[19077]" dev="sockfs" ino=19077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.140178][ T7390] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.157791][ T7390] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1547: corrupted inode contents [ 83.173435][ T7390] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1547: mark_inode_dirty error [ 83.185101][ T7390] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1547: corrupted inode contents [ 83.197962][ T7390] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1547: mark_inode_dirty error [ 83.212708][ T7402] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 83.251153][ T7409] netlink: 'syz.0.1556': attribute type 2 has an invalid length. [ 83.270864][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.386963][ T7430] netem: unknown loss type 13 [ 83.391702][ T7430] netem: change failed [ 83.419590][ T7436] loop3: detected capacity change from 0 to 512 [ 83.430079][ T7436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.444868][ T7436] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.458347][ T7442] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 83.468861][ T7441] pim6reg: entered allmulticast mode [ 83.478826][ T7436] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1574: corrupted inode contents [ 83.491466][ T7436] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1574: mark_inode_dirty error [ 83.503309][ T7436] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1574: corrupted inode contents [ 83.518639][ T7436] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1574: mark_inode_dirty error [ 83.529924][ T29] audit: type=1326 audit(1757102290.785:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.553421][ T29] audit: type=1326 audit(1757102290.785:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.577434][ T29] audit: type=1326 audit(1757102290.795:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.601013][ T29] audit: type=1326 audit(1757102290.795:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.624884][ T29] audit: type=1326 audit(1757102290.795:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.648896][ T29] audit: type=1326 audit(1757102290.795:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.672335][ T29] audit: type=1326 audit(1757102290.795:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.698871][ T29] audit: type=1326 audit(1757102290.965:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.707780][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.722427][ T29] audit: type=1326 audit(1757102290.965:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 83.756543][ T7449] loop7: detected capacity change from 0 to 256 [ 83.763388][ T7449] msdos: Bad value for 'fmask' [ 83.801028][ T7457] netlink: 'syz.3.1582': attribute type 3 has an invalid length. [ 84.462444][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a974c00: rx timeout, send abort [ 84.471217][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a974c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.740520][ T7494] loop4: detected capacity change from 0 to 128 [ 84.751099][ T7497] loop7: detected capacity change from 0 to 512 [ 84.753857][ T7494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.765562][ T7494] FAT-fs (loop4): Filesystem has been set read-only [ 84.772637][ T7494] bio_check_eod: 24815 callbacks suppressed [ 84.772652][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.772652][ T7494] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 84.793245][ T7494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.801326][ T7494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.810029][ T7500] syz.4.1602: attempt to access beyond end of device [ 84.810029][ T7500] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.825321][ T7497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.845330][ T7500] syz.4.1602: attempt to access beyond end of device [ 84.845330][ T7500] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.858835][ T7497] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.859220][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.859220][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.892563][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.905607][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.905607][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.920220][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.920220][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.934161][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.934161][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.947744][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.947744][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.961081][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.961081][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.974970][ T7494] syz.4.1602: attempt to access beyond end of device [ 84.974970][ T7494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.115275][ T7526] loop3: detected capacity change from 0 to 512 [ 85.150480][ T7526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.215172][ T7526] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.228038][ T7532] loop5: detected capacity change from 0 to 512 [ 85.247514][ T7532] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.263007][ T7532] EXT4-fs (loop5): 1 truncate cleaned up [ 85.270447][ T7532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.293689][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.407067][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.451659][ T7543] loop3: detected capacity change from 0 to 512 [ 85.474816][ T7543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.506316][ T7543] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.521742][ T7550] loop7: detected capacity change from 0 to 1024 [ 85.543131][ T7550] EXT4-fs: Ignoring removed orlov option [ 85.549201][ T7550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.574310][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.622340][ T7550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.646695][ T7558] __nla_validate_parse: 23 callbacks suppressed [ 85.646738][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 85.709660][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.782021][ T7577] loop3: detected capacity change from 0 to 512 [ 85.803749][ T7577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.823656][ T7577] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.883858][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.933128][ T7603] loop3: detected capacity change from 0 to 128 [ 85.944624][ T7606] IPVS: stopping master sync thread 7608 ... [ 85.945521][ T7608] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 85.965482][ T7603] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 85.973458][ T7603] FAT-fs (loop3): Filesystem has been set read-only [ 85.982453][ T7603] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 85.990380][ T7603] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.047899][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.057471][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.202930][ T1077] hid_parser_main: 19 callbacks suppressed [ 86.202951][ T1077] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 86.217825][ T1077] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 86.226084][ T7639] loop7: detected capacity change from 0 to 8192 [ 86.233461][ T1077] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 86.252592][ T1077] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 86.306571][ T7650] binfmt_misc: register: failed to install interpreter file ./file0 [ 86.351182][ T7652] loop4: detected capacity change from 0 to 128 [ 86.529279][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.548224][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.715434][ T7660] : renamed from bond0 (while UP) [ 86.877765][ T3398] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 86.885236][ T3398] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 86.892983][ T3398] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 86.902942][ T3398] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 86.935575][ T7674] loop4: detected capacity change from 0 to 128 [ 87.066817][ T7683] loop7: detected capacity change from 0 to 512 [ 87.075303][ T7683] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 87.087393][ T7683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 87.096622][ T7683] System zones: 1-12 [ 87.101027][ T7683] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1679: corrupted in-inode xattr: e_value size too large [ 87.116594][ T7683] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1679: couldn't read orphan inode 15 (err -117) [ 87.130969][ T7683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.156303][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.242444][ T7705] loop7: detected capacity change from 0 to 128 [ 87.252435][ T7705] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 87.260900][ T7705] FAT-fs (loop7): Filesystem has been set read-only [ 87.267675][ T7705] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 87.275786][ T7705] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 87.402389][ T7719] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1694'. [ 87.933082][ T7765] loop3: detected capacity change from 0 to 512 [ 87.949986][ T7765] journal_path: Non-blockdev passed as './bus' [ 87.956404][ T7765] EXT4-fs: error: could not find journal device path [ 88.169677][ T7781] ipvlan2: entered promiscuous mode [ 88.183935][ T7781] bridge0: port 3(ipvlan2) entered blocking state [ 88.190705][ T7781] bridge0: port 3(ipvlan2) entered disabled state [ 88.200787][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 88.200800][ T29] audit: type=1326 audit(1757102295.465:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.230590][ T29] audit: type=1326 audit(1757102295.465:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.254027][ T29] audit: type=1326 audit(1757102295.465:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.270888][ T7781] ipvlan2: entered allmulticast mode [ 88.277571][ T29] audit: type=1326 audit(1757102295.465:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.283061][ T7781] bridge0: entered allmulticast mode [ 88.324966][ T7787] loop5: detected capacity change from 0 to 128 [ 88.328938][ T7781] ipvlan2: left allmulticast mode [ 88.332215][ T29] audit: type=1400 audit(1757102295.575:2344): avc: denied { listen } for pid=7784 comm="syz.5.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.336437][ T7781] bridge0: left allmulticast mode [ 88.363977][ T7787] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.377003][ T7787] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.411389][ T29] audit: type=1326 audit(1757102295.645:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.435628][ T29] audit: type=1326 audit(1757102295.645:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2941ebe9 code=0x7ffc0000 [ 88.460401][ T29] audit: type=1400 audit(1757102295.725:2347): avc: denied { setattr } for pid=7786 comm="syz.5.1724" path="/266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.515154][ T29] audit: type=1400 audit(1757102295.775:2348): avc: denied { ioctl } for pid=7786 comm="syz.5.1724" path="/266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.527372][ T4734] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.672451][ T29] audit: type=1400 audit(1757102301.938:2349): avc: denied { connect } for pid=7805 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.727857][ T7813] loop5: detected capacity change from 0 to 128 [ 88.749703][ T7813] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.762657][ T7813] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.776537][ T7813] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.1736: bg 0: bad block bitmap checksum [ 88.801786][ T4734] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.937968][ T7850] 9pnet: Could not find request transport: 0xffffffffffffffff [ 88.941071][ T7848] capability: warning: `syz.0.1752' uses 32-bit capabilities (legacy support in use) [ 89.043994][ T7865] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 89.043994][ T7865] program syz.4.1760 not setting count and/or reply_len properly [ 89.178429][ T7894] smc: net device bond0 applied user defined pnetid SYZ0 [ 89.198928][ T7894] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.232103][ T7902] macvtap0: refused to change device tx_queue_len [ 89.421382][ T7934] hub 2-0:1.0: USB hub found [ 89.426218][ T7934] hub 2-0:1.0: 8 ports detected [ 89.552316][ T7974] macvtap0: refused to change device tx_queue_len [ 89.586715][ T7979] loop7: detected capacity change from 0 to 1024 [ 89.593642][ T7979] EXT4-fs: Ignoring removed orlov option [ 89.599652][ T7979] ext4: Unknown parameter 'nouser_xattr' [ 89.833713][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1828'. [ 89.882320][ T8019] loop7: detected capacity change from 0 to 1024 [ 89.899208][ T8019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.985277][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.105134][ T8031] netlink: 'syz.5.1834': attribute type 13 has an invalid length. [ 90.131627][ T8031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.366402][ T8065] serio: Serial port ptm0 [ 90.512594][ T8099] loop7: detected capacity change from 0 to 1024 [ 90.525118][ T8099] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.563635][ T8106] ALSA: seq fatal error: cannot create timer (-22) [ 90.571661][ T8110] loop7: detected capacity change from 0 to 128 [ 90.590120][ T8112] loop3: detected capacity change from 0 to 164 [ 90.606919][ T8112] rock: directory entry would overflow storage [ 90.613282][ T8112] rock: sig=0x66, size=4, remaining=3 [ 90.622707][ T8112] rock: directory entry would overflow storage [ 90.629147][ T8112] rock: sig=0x66, size=4, remaining=3 [ 90.636749][ T8112] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 90.661896][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 90.679919][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 90.695372][ T8124] netlink: 'syz.7.1879': attribute type 1 has an invalid length. [ 90.731078][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'. [ 90.740082][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1882'. [ 90.822538][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1891'. [ 90.917801][ T8167] netlink: 'syz.7.1901': attribute type 3 has an invalid length. [ 90.928740][ T3398] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 90.936438][ T3398] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 90.944491][ T3398] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 90.952685][ T3398] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.050154][ T8188] netlink: 'syz.3.1908': attribute type 5 has an invalid length. [ 91.061756][ T8188] batman_adv: batadv0: Adding interface: vxlan0 [ 91.068253][ T8188] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.094859][ T8188] batman_adv: batadv0: Interface activated: vxlan0 [ 91.101776][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.114039][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.124092][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.134525][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.162288][ T8193] loop3: detected capacity change from 0 to 4096 [ 91.170456][ T8193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.186084][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1912'. [ 91.205366][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /346/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.228949][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.251123][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.263215][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /346/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.287500][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.308110][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.321063][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /346/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.346307][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.368664][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.380865][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /346/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.403677][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.425362][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.438752][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /346/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.461260][ T3310] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 91.484160][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.496580][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.509917][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.522041][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.533089][ T8210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.566552][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 91.571366][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.589309][ T3310] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 91.596777][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 91.640825][ T8218] loop7: detected capacity change from 0 to 512 [ 91.650405][ T8218] EXT4-fs (loop7): orphan cleanup on readonly fs [ 91.660026][ T8218] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1921: bad orphan inode 13 [ 91.687086][ T8218] ext4_test_bit(bit=12, block=18) = 1 [ 91.692804][ T8218] is_bad_inode(inode)=0 [ 91.697280][ T8218] NEXT_ORPHAN(inode)=2130706432 [ 91.702264][ T8218] max_ino=32 [ 91.705939][ T8218] i_nlink=1 [ 91.709695][ T8218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.709776][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1923'. [ 91.734209][ T8218] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 91.745205][ T8225] loop0: detected capacity change from 0 to 128 [ 91.757167][ T8218] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.779043][ T8225] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 91.788713][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.803040][ T8225] FAT-fs (loop0): FAT read failed (blocknr 128) [ 91.881858][ T8236] SELinux: ebitmap start bit (1952802677) is not a multiple of the map unit size (64) [ 91.894797][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.894813][ T8236] SELinux: failed to load policy [ 91.917750][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.928666][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.028361][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.039021][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.070527][ T8263] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 92.083263][ T8263] SELinux: failed to load policy [ 92.129173][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.139589][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.166510][ T8280] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1947'. [ 92.198322][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.209470][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.337865][ T144] batman_adv: batadv0: Interface deactivated: vxlan0 [ 92.349540][ T5626] IPVS: starting estimator thread 0... [ 92.444015][ T144] batman_adv: batadv0: Removing interface: vxlan0 [ 92.450822][ T8302] IPVS: using max 3360 ests per chain, 168000 per kthread [ 92.463429][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.474837][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.488371][ T144] bond0 (unregistering): Released all slaves [ 92.500699][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 92.519666][ T8316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.597714][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.604840][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.614054][ T8259] bridge_slave_0: entered allmulticast mode [ 92.621339][ T8259] bridge_slave_0: entered promiscuous mode [ 92.628522][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635607][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.644327][ T8259] bridge_slave_1: entered allmulticast mode [ 92.659321][ T8259] bridge_slave_1: entered promiscuous mode [ 92.671961][ T144] hsr_slave_0: left promiscuous mode [ 92.681406][ T144] hsr_slave_1: left promiscuous mode [ 92.687409][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.695010][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.704937][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.712714][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.723912][ T144] veth1_macvtap: left promiscuous mode [ 92.731332][ T144] veth0_macvtap: left promiscuous mode [ 92.737345][ T144] veth1_vlan: left promiscuous mode [ 92.743072][ T144] veth0_vlan: left promiscuous mode [ 92.805749][ T144] team0 (unregistering): Port device team_slave_1 removed [ 92.816580][ T144] team0 (unregistering): Port device team_slave_0 removed [ 92.855414][ T8343] bond1: entered promiscuous mode [ 92.860616][ T8343] bond1: entered allmulticast mode [ 92.867544][ T8343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.877556][ T8343] bond1 (unregistering): Released all slaves [ 92.898617][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.914917][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.951082][ T8259] team0: Port device team_slave_0 added [ 92.960714][ T8259] team0: Port device team_slave_1 added [ 93.016602][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.023605][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.050220][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.084169][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.091184][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.117410][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.157889][ T8259] hsr_slave_0: entered promiscuous mode [ 93.167120][ T8259] hsr_slave_1: entered promiscuous mode [ 93.173377][ T8259] debugfs: 'hsr0' already exists in 'hsr' [ 93.179181][ T8259] Cannot create hsr debugfs directory [ 93.283128][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 93.290874][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.298633][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.301205][ T8389] loop4: detected capacity change from 0 to 128 [ 93.306116][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.313101][ T8389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.319759][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.332173][ T8389] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.341031][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.356597][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.364639][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.372461][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 93.379898][ T1077] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.392234][ T1077] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 93.407844][ T8259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 93.418853][ T8259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 93.445124][ T8259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 93.454177][ T8259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 93.461520][ T3432] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.527828][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.557960][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.572491][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.579711][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.593042][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.600219][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.719778][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.762168][ T8431] loop0: detected capacity change from 0 to 164 [ 93.777191][ T8431] ISOFS: unable to read i-node block [ 93.782706][ T8431] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.895076][ T8259] veth0_vlan: entered promiscuous mode [ 93.903734][ T8259] veth1_vlan: entered promiscuous mode [ 93.919238][ T8259] veth0_macvtap: entered promiscuous mode [ 93.926973][ T8259] veth1_macvtap: entered promiscuous mode [ 93.937142][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.947969][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.958743][ T1083] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.969483][ T1083] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.978393][ T1083] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988288][ T1083] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023490][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 94.023504][ T29] audit: type=1326 audit(1757102307.291:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.068109][ T29] audit: type=1326 audit(1757102307.311:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.091967][ T29] audit: type=1326 audit(1757102307.311:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.116190][ T29] audit: type=1326 audit(1757102307.311:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.140219][ T29] audit: type=1326 audit(1757102307.311:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.163955][ T29] audit: type=1326 audit(1757102307.311:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.187852][ T29] audit: type=1326 audit(1757102307.311:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.211604][ T29] audit: type=1326 audit(1757102307.311:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.235353][ T29] audit: type=1326 audit(1757102307.311:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.259637][ T29] audit: type=1326 audit(1757102307.311:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 94.359392][ T8485] loop7: detected capacity change from 0 to 164 [ 94.368217][ T8485] ISOFS: unable to read i-node block [ 94.373945][ T8485] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 94.412843][ T8489] wireguard0: entered promiscuous mode [ 94.418565][ T8489] wireguard0: entered allmulticast mode [ 94.697874][ T8528] wireguard0: entered promiscuous mode [ 94.703632][ T8528] wireguard0: entered allmulticast mode [ 95.387018][ T8559] block device autoloading is deprecated and will be removed. [ 95.395063][ T8559] blk_print_req_error: 10 callbacks suppressed [ 95.395080][ T8559] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.417457][ T8559] FAT-fs (loop1): unable to read boot sector [ 95.431129][ T8564] wireguard0: entered promiscuous mode [ 95.436824][ T8564] wireguard0: entered allmulticast mode [ 95.478908][ T8568] loop0: detected capacity change from 0 to 512 [ 95.489723][ T8568] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.497239][ T8568] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2066: bad orphan inode 13 [ 95.508286][ T8568] ext4_test_bit(bit=12, block=18) = 1 [ 95.513683][ T8568] is_bad_inode(inode)=0 [ 95.518006][ T8568] NEXT_ORPHAN(inode)=2130706432 [ 95.523047][ T8568] max_ino=32 [ 95.526284][ T8568] i_nlink=1 [ 95.529882][ T8568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.549966][ T8568] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 95.586637][ T8568] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 95.661411][ T8582] loop7: detected capacity change from 0 to 1024 [ 95.668984][ T8584] __nla_validate_parse: 2 callbacks suppressed [ 95.669000][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2071'. [ 95.685686][ T8584] dummy0: left allmulticast mode [ 95.691000][ T8584] bridge0: port 3(dummy0) entered disabled state [ 95.699184][ T8584] bridge_slave_1: left allmulticast mode [ 95.705166][ T8584] bridge_slave_1: left promiscuous mode [ 95.711227][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.736870][ T8591] SELinux: failed to load policy [ 95.759930][ T8582] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 95.776909][ T8584] bridge_slave_0: left allmulticast mode [ 95.782716][ T8584] bridge_slave_0: left promiscuous mode [ 95.788501][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.878652][ T8599] wireguard0: entered promiscuous mode [ 95.884406][ T8599] wireguard0: entered allmulticast mode [ 95.999683][ T8618] SELinux: failed to load policy [ 96.196898][ T8636] loop8: detected capacity change from 0 to 1024 [ 96.204126][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 96.215051][ T8638] bridge_slave_1: left allmulticast mode [ 96.221006][ T8638] bridge_slave_1: left promiscuous mode [ 96.226922][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.236275][ T8638] bridge_slave_0: left allmulticast mode [ 96.241941][ T8638] bridge_slave_0: left promiscuous mode [ 96.247742][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.267342][ T8636] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 96.375923][ T8661] wireguard0: entered promiscuous mode [ 96.381434][ T8661] wireguard0: entered allmulticast mode [ 96.431516][ T8672] loop5: detected capacity change from 0 to 128 [ 96.438390][ T8672] EXT4-fs: Ignoring removed nobh option [ 96.446708][ T8672] EXT4-fs mount: 5 callbacks suppressed [ 96.446725][ T8672] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.465920][ T8672] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.489338][ T4734] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.696502][ T8697] loop4: detected capacity change from 0 to 1024 [ 96.703987][ T8697] ext4: Bad value for 'max_dir_size_kb' [ 96.732523][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 96.740539][ T8706] loop4: detected capacity change from 0 to 128 [ 96.741867][ T8704] dummy0: left allmulticast mode [ 96.749261][ T8706] EXT4-fs: Ignoring removed nobh option [ 96.753067][ T8704] bridge0: port 3(dummy0) entered disabled state [ 96.760569][ T8706] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.777544][ T8706] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.777827][ T8704] bridge_slave_1: left allmulticast mode [ 96.794417][ T8704] bridge_slave_1: left promiscuous mode [ 96.800518][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.818127][ T5534] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.829166][ T8704] bridge_slave_0: left allmulticast mode [ 96.835045][ T8704] bridge_slave_0: left promiscuous mode [ 96.840955][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.872962][ T8715] netlink: 'syz.7.2131': attribute type 6 has an invalid length. [ 96.895713][ T8719] loop0: detected capacity change from 0 to 1024 [ 96.910481][ T8719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.957018][ T5555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.971180][ T8725] random: crng reseeded on system resumption [ 97.015783][ T8734] loop0: detected capacity change from 0 to 764 [ 97.151054][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 97.744024][ T8770] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 97.753025][ T8769] netlink: 'syz.5.2152': attribute type 6 has an invalid length. [ 97.782586][ T8773] wireguard0: entered promiscuous mode [ 97.788256][ T8773] wireguard0: entered allmulticast mode [ 97.801062][ T8779] netlink: 'syz.8.2157': attribute type 3 has an invalid length. [ 98.197718][ T8793] loop7: detected capacity change from 0 to 1024 [ 98.215091][ T8793] ext4: Bad value for 'max_dir_size_kb' [ 98.244764][ T8799] netlink: 'syz.8.2166': attribute type 3 has an invalid length. [ 98.252768][ T8799] netlink: 'syz.8.2166': attribute type 3 has an invalid length. [ 98.327356][ T8813] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 99.028244][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 99.028259][ T29] audit: type=1326 audit(1757102312.294:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 99.038025][ T8831] loop8: detected capacity change from 0 to 1024 [ 99.095841][ T8831] ext4: Bad value for 'max_dir_size_kb' [ 99.099668][ T29] audit: type=1326 audit(1757102312.294:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 99.125357][ T29] audit: type=1326 audit(1757102312.294:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 99.149099][ T29] audit: type=1326 audit(1757102312.294:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f181f68ec23 code=0x7ffc0000 [ 99.172917][ T29] audit: type=1326 audit(1757102312.294:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f181f68d69f code=0x7ffc0000 [ 99.196669][ T29] audit: type=1326 audit(1757102312.314:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f181f68ec77 code=0x7ffc0000 [ 99.220169][ T29] audit: type=1326 audit(1757102312.314:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f181f68d550 code=0x7ffc0000 [ 99.243797][ T29] audit: type=1326 audit(1757102312.314:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f181f68e7eb code=0x7ffc0000 [ 99.267672][ T29] audit: type=1326 audit(1757102312.364:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f181f68d84a code=0x7ffc0000 [ 99.291370][ T29] audit: type=1326 audit(1757102312.364:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f181f68d84a code=0x7ffc0000 [ 99.431173][ T8858] SELinux: security policydb version 17 (MLS) not backwards compatible [ 99.473517][ T8858] SELinux: failed to load policy [ 99.570639][ T8871] SELinux: security policydb version 17 (MLS) not backwards compatible [ 99.579382][ T8871] SELinux: failed to load policy [ 99.695522][ T8899] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 99.780513][ T8915] loop7: detected capacity change from 0 to 512 [ 99.800463][ T8917] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.820061][ T8915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.833397][ T8915] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.865721][ T8917] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.928562][ T7229] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.955580][ T8917] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.019084][ T8917] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.108307][ T1083] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.153122][ T51] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.169572][ T1083] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.183131][ T51] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.191862][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.200890][ T51] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.244727][ T1083] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.305336][ T1083] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.337431][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 100.346450][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 100.416088][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2244'. [ 100.428321][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2244'. [ 100.439467][ T1083] bridge_slave_1: left allmulticast mode [ 100.445335][ T1083] bridge_slave_1: left promiscuous mode [ 100.451282][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.459365][ T1083] bridge_slave_0: left allmulticast mode [ 100.465213][ T1083] bridge_slave_0: left promiscuous mode [ 100.471091][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.534996][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.545736][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.560882][ T1083] bond0 (unregistering): Released all slaves [ 100.575836][ T8972] pim6reg: entered allmulticast mode [ 100.603346][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 100.666275][ T1083] hsr_slave_0: left promiscuous mode [ 100.672006][ T1083] hsr_slave_1: left promiscuous mode [ 100.678431][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.685892][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.696658][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.704440][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.716137][ T1083] veth1_macvtap: left promiscuous mode [ 100.721842][ T1083] veth0_macvtap: left promiscuous mode [ 100.727703][ T1083] veth1_vlan: left promiscuous mode [ 100.733827][ T1083] veth0_vlan: left promiscuous mode [ 100.794975][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 100.804664][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 100.848449][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.855815][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.863409][ T8941] bridge_slave_0: entered allmulticast mode [ 100.869948][ T8941] bridge_slave_0: entered promiscuous mode [ 100.877733][ T3412] infiniband syz1: ib_query_port failed (-19) [ 100.877902][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.891242][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.901734][ T8941] bridge_slave_1: entered allmulticast mode [ 100.908450][ T8941] bridge_slave_1: entered promiscuous mode [ 100.931059][ T9005] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 100.943162][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.961563][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.993080][ T9014] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.004259][ T9011] IPVS: stopping master sync thread 9014 ... [ 101.016159][ T8941] team0: Port device team_slave_0 added [ 101.024018][ T8941] team0: Port device team_slave_1 added [ 101.057261][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.064375][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.090590][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.120965][ T9023] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.142511][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.149572][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.154179][ T9025] loop5: detected capacity change from 0 to 512 [ 101.175946][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.183646][ T9025] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.200082][ T9025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.211691][ T9025] EXT4-fs (loop5): 1 truncate cleaned up [ 101.218095][ T9025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.253714][ T8941] hsr_slave_0: entered promiscuous mode [ 101.259861][ T8941] hsr_slave_1: entered promiscuous mode [ 101.435839][ T8941] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.448211][ T8941] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.459924][ T8941] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.477861][ T8941] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.535973][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.543207][ T8941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.550466][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.557656][ T8941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.613467][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.632391][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.661709][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.678203][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.689007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.696107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.717765][ T8941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.728540][ T8941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.741555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.748739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.879053][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.101849][ T8941] veth0_vlan: entered promiscuous mode [ 102.122251][ T8941] veth1_vlan: entered promiscuous mode [ 102.153846][ T8941] veth0_macvtap: entered promiscuous mode [ 102.162319][ T8941] veth1_macvtap: entered promiscuous mode [ 102.179961][ C1] vcan0: j1939_tp_rxtimer: 0xffff888113323800: rx timeout, send abort [ 102.188470][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113323800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.208378][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.217338][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.237381][ T4734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.250992][ T144] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.267536][ T144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.280711][ T144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.296360][ T144] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.413005][ T9088] loop5: detected capacity change from 0 to 8192 [ 102.444288][ T9092] loop9: detected capacity change from 0 to 512 [ 102.452040][ T9092] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.469039][ T9092] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 102.481232][ T9092] EXT4-fs (loop9): 1 truncate cleaned up [ 102.487403][ T9092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.532863][ T9098] loop4: detected capacity change from 0 to 512 [ 102.539419][ T9098] journal_path: Non-blockdev passed as './bus' [ 102.545743][ T9098] EXT4-fs: error: could not find journal device path [ 103.222234][ T9113] loop8: detected capacity change from 0 to 512 [ 103.240870][ T9113] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 103.264882][ T9113] EXT4-fs (loop8): 1 truncate cleaned up [ 103.281312][ T9113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.468643][ T8259] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.564950][ T8941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.584951][ T9126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.749930][ T9147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.807377][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.816701][ T9151] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.825963][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.835112][ T9151] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.844610][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.868203][ T9147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.879873][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.889382][ T9151] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.898700][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.907679][ T9151] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.918043][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 103.968066][ T9147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.014680][ T9147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.068600][ T3332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.079553][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.093251][ T144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.107537][ T144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.229355][ T9193] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.230658][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 104.230679][ T29] audit: type=1326 audit(1757102317.496:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.269891][ T29] audit: type=1326 audit(1757102317.496:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.294743][ T29] audit: type=1326 audit(1757102317.516:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.318919][ T29] audit: type=1326 audit(1757102317.516:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.343138][ T29] audit: type=1326 audit(1757102317.516:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.366920][ T29] audit: type=1326 audit(1757102317.516:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.391048][ T29] audit: type=1326 audit(1757102317.516:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.414859][ T29] audit: type=1326 audit(1757102317.516:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.439468][ T29] audit: type=1326 audit(1757102317.516:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.463583][ T29] audit: type=1326 audit(1757102317.516:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.0.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee12dcebe9 code=0x7ffc0000 [ 104.522122][ T9200] loop5: detected capacity change from 0 to 512 [ 104.529513][ T9200] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.541620][ T9200] EXT4-fs (loop5): 1 truncate cleaned up [ 104.547804][ T9200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.605420][ T4734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.382818][ T9193] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.432453][ T9193] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.472480][ T9193] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.515482][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.526538][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.537443][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.549128][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.582722][ T9213] loop4: detected capacity change from 0 to 512 [ 105.589843][ T9213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.624173][ T9213] EXT4-fs (loop4): 1 truncate cleaned up [ 105.630466][ T9212] macvtap0: refused to change device tx_queue_len [ 105.631360][ T9213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.720861][ T5534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.788855][ T9230] loop5: detected capacity change from 0 to 1024 [ 105.796243][ T9230] ext4: Bad value for 'max_dir_size_kb' [ 106.583675][ T9270] netlink: 'syz.5.2356': attribute type 3 has an invalid length. [ 107.435102][ T9276] loop9: detected capacity change from 0 to 1024 [ 107.444647][ T9276] ext4: Bad value for 'max_dir_size_kb' [ 107.582501][ T9293] hub 2-0:1.0: USB hub found [ 107.587249][ T9293] hub 2-0:1.0: 8 ports detected [ 108.152386][ T9315] loop0: detected capacity change from 0 to 1024 [ 108.174255][ T9315] ext4: Bad value for 'max_dir_size_kb' [ 108.343485][ T9333] smc: net device bond0 applied user defined pnetid SYZ0 [ 108.361159][ T9333] smc: net device bond0 erased user defined pnetid SYZ0 [ 108.436891][ T9353] loop8: detected capacity change from 0 to 1024 [ 108.444565][ T9353] ext4: Bad value for 'max_dir_size_kb' [ 109.117155][ T9387] loop8: detected capacity change from 0 to 764 [ 109.248943][ T9394] random: crng reseeded on system resumption [ 109.695109][ T9421] loop9: detected capacity change from 0 to 1024 [ 109.730136][ T9421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.780373][ T8941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.919328][ T9448] loop8: detected capacity change from 0 to 1024 [ 109.929096][ T9448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.075666][ T8259] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.136480][ T9463] netlink: 'syz.9.2437': attribute type 3 has an invalid length. [ 110.145231][ T9463] netlink: 'syz.9.2437': attribute type 3 has an invalid length. [ 110.355074][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 110.355103][ T29] audit: type=1326 audit(1757102323.629:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.385109][ T29] audit: type=1326 audit(1757102323.629:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.577404][ T29] audit: type=1326 audit(1757102323.629:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.600952][ T29] audit: type=1326 audit(1757102323.629:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.624939][ T29] audit: type=1326 audit(1757102323.629:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.648736][ T29] audit: type=1326 audit(1757102323.709:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.672410][ T29] audit: type=1326 audit(1757102323.709:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.696151][ T29] audit: type=1326 audit(1757102323.709:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.720289][ T29] audit: type=1326 audit(1757102323.709:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f181f68ebe9 code=0x7ffc0000 [ 110.744173][ T29] audit: type=1326 audit(1757102323.709:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.8.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 110.871408][ T9505] netlink: 'syz.5.2454': attribute type 2 has an invalid length. [ 110.879425][ T9505] __nla_validate_parse: 21 callbacks suppressed [ 110.879454][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2454'. [ 111.046498][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.055860][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.065121][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.094230][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.103530][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.113323][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.150459][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.159632][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.168865][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2461'. [ 111.256348][ T9529] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.286857][ T9529] FAT-fs (loop9): unable to read boot sector [ 112.017233][ T9566] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.027846][ T9566] FAT-fs (loop19): unable to read boot sector [ 112.090813][ T9581] netem: unknown loss type 13 [ 112.095555][ T9581] netem: change failed [ 112.135800][ T9586] pim6reg: entered allmulticast mode [ 112.215722][ T9605] loop5: detected capacity change from 0 to 256 [ 112.226926][ T9605] msdos: Bad value for 'fmask' [ 112.650567][ T9601] netlink: 'syz.4.2493': attribute type 13 has an invalid length. [ 112.704901][ T9601] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.583487][ T9410] hid_parser_main: 22 callbacks suppressed [ 113.583504][ T9410] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 113.597028][ T9410] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 113.615223][ T9410] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 113.623569][ T9410] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 113.636367][ T9637] loop0: detected capacity change from 0 to 4096 [ 113.677402][ T9637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.697344][ T9644] pim6reg: entered allmulticast mode [ 113.711493][ T9650] netlink: 'syz.5.2513': attribute type 5 has an invalid length. [ 113.737683][ T9650] batman_adv: batadv0: Adding interface: vxlan0 [ 113.743984][ T9650] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.789092][ T9652] loop4: detected capacity change from 0 to 256 [ 113.795618][ T9650] batman_adv: batadv0: Interface activated: vxlan0 [ 113.804925][ T1083] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.814677][ T9652] msdos: Bad value for 'fmask' [ 113.829118][ T1083] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.843170][ T5555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.873083][ T1083] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.895315][ T1083] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.027110][ T9675] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 114.875381][ T9690] pim6reg: entered allmulticast mode [ 115.028925][ T9718] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.069747][ T9723] loop9: detected capacity change from 0 to 7 [ 115.076985][ T9723] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.077564][ T9721] loop4: detected capacity change from 0 to 512 [ 115.085343][ T9723] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.099516][ T9723] loop9: unable to read partition table [ 115.101010][ T9721] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 115.106367][ T9723] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.106367][ T9723] ) failed (rc=-5) [ 115.114392][ T9721] EXT4-fs (loop4): invalid journal inode [ 115.132856][ T9721] EXT4-fs (loop4): can't get journal size [ 115.139891][ T9721] EXT4-fs (loop4): 1 truncate cleaned up [ 115.146098][ T9721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.214988][ T9721] loop4: detected capacity change from 512 to 0 [ 115.222151][ C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 115.231778][ T9721] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.2549: reading directory lblock 0 [ 115.244290][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 115.254153][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 115.263789][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.272048][ T9721] EXT4-fs (loop4): I/O error while writing superblock [ 115.279282][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119376400: rx timeout, send abort [ 115.288186][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119376400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.314809][ C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 115.326002][ T5534] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 115.340759][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 115.350456][ C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 115.360214][ T5534] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 115.375295][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 115.384816][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 115.394293][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.402912][ T5534] EXT4-fs (loop4): I/O error while writing superblock [ 115.409979][ T5534] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 115.420433][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.450799][ T5534] EXT4-fs (loop4): I/O error while writing superblock [ 115.457727][ T5534] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 115.469613][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.478322][ T5534] EXT4-fs (loop4): I/O error while writing superblock [ 115.493083][ T1083] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 115.502210][ T9732] loop8: detected capacity change from 0 to 512 [ 115.513487][ T9732] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.517726][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.525665][ T9734] loop0: detected capacity change from 0 to 512 [ 115.535041][ T1083] EXT4-fs (loop4): I/O error while writing superblock [ 115.538371][ T9734] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 115.542254][ T5534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.559897][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 115.568407][ T5534] EXT4-fs (loop4): I/O error while writing superblock [ 115.575440][ T9732] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 115.585783][ T9734] EXT4-fs (loop0): invalid journal inode [ 115.591832][ T9734] EXT4-fs (loop0): can't get journal size [ 115.598741][ T9732] EXT4-fs (loop8): 1 truncate cleaned up [ 115.600569][ T9734] EXT4-fs (loop0): 1 truncate cleaned up [ 115.604866][ T9732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.613034][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.694733][ T9734] loop0: detected capacity change from 512 to 0 [ 115.707394][ T9734] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.2564: reading directory lblock 0 [ 115.735243][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 115.743766][ T9734] EXT4-fs (loop0): I/O error while writing superblock [ 115.758307][ T51] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.810917][ T51] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.823288][ T5555] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 115.844193][ T5555] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 115.859766][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 115.865001][ T9751] loop9: detected capacity change from 0 to 7 [ 115.875482][ T5555] EXT4-fs (loop0): I/O error while writing superblock [ 115.882303][ T5555] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 115.891598][ T9751] loop9: unable to read partition table [ 115.905687][ T9751] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.905687][ T9751] ) failed (rc=-5) [ 115.906360][ T5555] EXT4-fs (loop0): I/O error while writing superblock [ 115.925897][ T5555] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 115.938803][ T51] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.959568][ T5555] EXT4-fs (loop0): I/O error while writing superblock [ 116.016224][ T51] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.049829][ T12] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:0: unable to read itable block [ 116.083630][ T12] EXT4-fs (loop0): I/O error while writing superblock [ 116.109220][ T8614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.126185][ T8614] EXT4-fs (loop0): I/O error while writing superblock [ 116.256954][ T51] smc: removing net device bond0 with user defined pnetid SYZ2 [ 116.265457][ T51]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.276593][ T51]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.286408][ T51]  (unregistering): Released all slaves [ 116.356556][ T51] hsr_slave_0: left promiscuous mode [ 116.362445][ T51] hsr_slave_1: left promiscuous mode [ 116.376009][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.383417][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.396330][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.404094][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.417198][ T51] veth1_macvtap: left promiscuous mode [ 116.422892][ T51] veth0_macvtap: left promiscuous mode [ 116.428762][ T51] veth1_vlan: left promiscuous mode [ 116.434004][ T51] veth0_vlan: left promiscuous mode [ 116.454318][ T8259] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.483492][ T51] pim6reg (unregistering): left allmulticast mode [ 116.515849][ T51] team0 (unregistering): Port device team_slave_1 removed [ 116.525939][ T51] team0 (unregistering): Port device team_slave_0 removed [ 116.554775][ T9410] syz1: Port: 1 Link DOWN [ 116.598452][ T9754] chnl_net:caif_netlink_parms(): no params data found [ 116.629983][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.637546][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.645181][ T9754] bridge_slave_0: entered allmulticast mode [ 116.651802][ T9754] bridge_slave_0: entered promiscuous mode [ 116.659081][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.666242][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.673570][ T9754] bridge_slave_1: entered allmulticast mode [ 116.680349][ T9754] bridge_slave_1: entered promiscuous mode [ 116.697119][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.708409][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.727667][ T9754] team0: Port device team_slave_0 added [ 116.734773][ T9754] team0: Port device team_slave_1 added [ 116.753744][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.760983][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.788013][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.800725][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.807839][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.835170][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.911920][ T9754] hsr_slave_0: entered promiscuous mode [ 116.919660][ T9754] hsr_slave_1: entered promiscuous mode [ 116.926989][ T9754] debugfs: 'hsr0' already exists in 'hsr' [ 116.932901][ T9754] Cannot create hsr debugfs directory [ 116.945294][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 116.945310][ T29] audit: type=1326 audit(1757102330.232:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 116.988461][ T29] audit: type=1326 audit(1757102330.232:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.013289][ T29] audit: type=1326 audit(1757102330.232:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.037211][ T29] audit: type=1326 audit(1757102330.232:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.061376][ T29] audit: type=1326 audit(1757102330.232:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.085715][ T29] audit: type=1326 audit(1757102330.232:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.109916][ T29] audit: type=1326 audit(1757102330.232:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.134679][ T29] audit: type=1326 audit(1757102330.232:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.158851][ T29] audit: type=1326 audit(1757102330.242:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.183113][ T29] audit: type=1326 audit(1757102330.242:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21e2c8ebe9 code=0x7ffc0000 [ 117.249890][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.305433][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.358153][ T9777] chnl_net:caif_netlink_parms(): no params data found [ 117.392503][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.403147][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.410654][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.418443][ T9777] bridge_slave_0: entered allmulticast mode [ 117.425757][ T9777] bridge_slave_0: entered promiscuous mode [ 117.434103][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.441740][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.449158][ T9777] bridge_slave_1: entered allmulticast mode [ 117.456415][ T9777] bridge_slave_1: entered promiscuous mode [ 117.463640][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.487627][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.497886][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.516294][ T9777] team0: Port device team_slave_0 added [ 117.522946][ T9777] team0: Port device team_slave_1 added [ 117.538222][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.545221][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.571547][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.583231][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.590441][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.616992][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.644448][ T9777] hsr_slave_0: entered promiscuous mode [ 117.650518][ T9777] hsr_slave_1: entered promiscuous mode [ 117.656434][ T9777] debugfs: 'hsr0' already exists in 'hsr' [ 117.662144][ T9777] Cannot create hsr debugfs directory [ 117.786642][ T51] smc: removing net device bond0 with user defined pnetid SYZ2 [ 117.795443][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.807147][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.816718][ T51] bond0 (unregistering): Released all slaves [ 117.838837][ T9754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.851068][ T9754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.865566][ T9754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.876984][ T9754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.893345][ T51] hsr_slave_0: left promiscuous mode [ 117.899868][ T51] hsr_slave_1: left promiscuous mode [ 117.905776][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.913221][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.921958][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.929565][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.941937][ T51] veth1_macvtap: left promiscuous mode [ 117.947950][ T51] veth0_macvtap: left promiscuous mode [ 117.958137][ T51] veth1_vlan: left promiscuous mode [ 117.964038][ T51] veth0_vlan: left promiscuous mode [ 117.997519][ T51] pim6reg (unregistering): left allmulticast mode [ 118.025534][ T51] team0 (unregistering): Port device team_slave_1 removed [ 118.035111][ T51] team0 (unregistering): Port device team_slave_0 removed [ 118.043035][ T1083] smc: removing ib device syz! [ 118.099018][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.111659][ T9754] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.123093][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.130635][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.150616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.157934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.230350][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.329150][ T9754] veth0_vlan: entered promiscuous mode [ 118.338671][ T9754] veth1_vlan: entered promiscuous mode [ 118.352972][ T9754] veth0_macvtap: entered promiscuous mode [ 118.360468][ T9754] veth1_macvtap: entered promiscuous mode [ 118.370349][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.381561][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.392105][ T3332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.401720][ T3332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.411402][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.420760][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.434663][ T51] IPVS: stop unused estimator thread 0... [ 118.462459][ T9777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.472701][ T9777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.481752][ T9777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.490804][ T9777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.535785][ T9777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.548181][ T9777] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.558871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.566162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.604193][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.611306][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.670381][ T9777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.725344][ T9867] SELinux: ebitmap start bit (1952802677) is not a multiple of the map unit size (64) [ 118.751215][ T9867] SELinux: failed to load policy [ 118.761472][ T9777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.829743][ T9777] veth0_vlan: entered promiscuous mode [ 118.837794][ T9777] veth1_vlan: entered promiscuous mode [ 118.852842][ T9777] veth0_macvtap: entered promiscuous mode [ 118.861208][ T9777] veth1_macvtap: entered promiscuous mode [ 118.871695][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.882871][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.894263][ T1083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.903665][ T1083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.913263][ T1083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.922168][ T1083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.967686][ T9889] loop4: detected capacity change from 0 to 512 [ 118.976671][ T9887] loop8: detected capacity change from 0 to 512 [ 118.984415][ T9888] loop0: detected capacity change from 0 to 512 [ 118.986555][ T9887] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 118.991185][ T9888] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.004991][ T9887] EXT4-fs (loop8): 1 truncate cleaned up [ 119.008540][ T9888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.014960][ T9887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.024306][ T9889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.037334][ T9887] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.049876][ T9889] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.068748][ T9888] EXT4-fs (loop0): 1 truncate cleaned up [ 119.078226][ T9888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.234223][ T9409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.881764][ T9777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.094946][ T9923] loop9: detected capacity change from 0 to 512 [ 120.103909][ T9923] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 120.124247][ T9923] EXT4-fs (loop9): 1 truncate cleaned up [ 120.132775][ T9923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.152190][ T9923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.155797][ T9931] loop0: detected capacity change from 0 to 512 [ 120.172915][ T9932] __nla_validate_parse: 27 callbacks suppressed [ 120.172935][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2605'. [ 120.193476][ T9931] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.201411][ T9931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.215107][ T9931] EXT4-fs (loop0): 1 truncate cleaned up [ 120.221956][ T9931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.491450][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.511394][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2622'. [ 120.807939][ T9967] chnl_net:caif_netlink_parms(): no params data found [ 120.836596][T10004] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 120.836861][T10000] IPVS: stopping master sync thread 10004 ... [ 120.881824][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.889336][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.906766][ T9967] bridge_slave_0: entered allmulticast mode [ 120.917758][ T9967] bridge_slave_0: entered promiscuous mode [ 120.929511][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.936838][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.945979][ T9967] bridge_slave_1: entered allmulticast mode [ 120.971132][ T9967] bridge_slave_1: entered promiscuous mode [ 121.004701][ T9967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.015599][ T9967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.040163][ T9967] team0: Port device team_slave_0 added [ 121.048203][ T9967] team0: Port device team_slave_1 added [ 121.083353][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.090742][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.117895][ T9967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.140994][ T9777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.158446][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.159219][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.174707][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.177828][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.201240][ T9967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.247180][T10031] binfmt_misc: register: failed to install interpreter file ./file0 [ 121.256694][ T3365] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 121.264775][ T3365] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 121.274732][ T3365] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 121.293297][ T3365] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 121.314959][ T9967] hsr_slave_0: entered promiscuous mode [ 121.321580][T10037] loop8: detected capacity change from 0 to 128 [ 121.327427][ T9967] hsr_slave_1: entered promiscuous mode [ 121.349113][ T9967] debugfs: 'hsr0' already exists in 'hsr' [ 121.354986][ T9967] Cannot create hsr debugfs directory [ 121.625165][ T9967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.634064][ T9967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.643360][ T9967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.652153][ T9967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.667477][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.674639][ T9967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.682147][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.689624][ T9967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.716801][ T9967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.727988][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.736136][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.747981][ T9967] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.757585][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.764922][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.775571][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.782711][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.840690][ T9967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.896830][ T9967] veth0_vlan: entered promiscuous mode [ 121.905165][ T9967] veth1_vlan: entered promiscuous mode [ 121.920441][ T9967] veth0_macvtap: entered promiscuous mode [ 121.928054][ T9967] veth1_macvtap: entered promiscuous mode [ 121.938547][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.950059][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.961356][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.972988][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.982505][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.993634][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.030925][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.043479][T10073] loop5: detected capacity change from 0 to 512 [ 122.050462][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.060540][T10073] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 122.069818][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.078806][T10073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 122.089427][T10073] System zones: 1-12 [ 122.097316][T10073] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2666: corrupted in-inode xattr: e_value size too large [ 122.112754][T10073] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2666: couldn't read orphan inode 15 (err -117) [ 122.125842][T10073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.154206][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.168853][ T4734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.182624][T10079] loop1: detected capacity change from 0 to 512 [ 122.189582][T10079] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.198062][T10079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.212786][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.222247][T10079] EXT4-fs (loop1): 1 truncate cleaned up [ 122.229394][T10081] : renamed from bond0 (while UP) [ 122.229437][T10079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.241964][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.259238][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.306136][ T12] bridge_slave_1: left allmulticast mode [ 122.312096][ T12] bridge_slave_1: left promiscuous mode [ 122.317772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.328185][ T12] bridge_slave_0: left allmulticast mode [ 122.334032][ T12] bridge_slave_0: left promiscuous mode [ 122.339813][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.424303][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.435146][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.445833][ T12] bond0 (unregistering): Released all slaves [ 122.486937][ T12] hsr_slave_0: left promiscuous mode [ 122.493267][ T12] hsr_slave_1: left promiscuous mode [ 122.499194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.506724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.514381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.521794][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.532643][ T12] veth1_macvtap: left promiscuous mode [ 122.538212][ T12] veth0_macvtap: left promiscuous mode [ 122.544070][ T12] veth1_vlan: left promiscuous mode [ 122.549730][ T12] veth0_vlan: left promiscuous mode [ 122.614394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.643961][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.675191][ T9411] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 122.682947][ T9411] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 122.690883][ T9411] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 122.721728][ T9411] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.809863][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 122.809895][ T29] audit: type=1326 audit(1757102336.085:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.840395][ T29] audit: type=1326 audit(1757102336.085:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.857257][T10095] loop9: detected capacity change from 0 to 8192 [ 122.872954][ T29] audit: type=1326 audit(1757102336.155:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.906180][ T29] audit: type=1326 audit(1757102336.185:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.930201][ T29] audit: type=1326 audit(1757102336.185:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.963660][ T29] audit: type=1326 audit(1757102336.245:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.987668][ T29] audit: type=1326 audit(1757102336.245:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 122.987712][T10106] loop0: detected capacity change from 0 to 128 [ 123.018236][ T29] audit: type=1326 audit(1757102336.245:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd898a5ebe9 code=0x7ffc0000 [ 123.046122][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.055527][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.094257][T10113] loop8: detected capacity change from 0 to 512 [ 123.109345][T10113] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 123.134909][T10113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 123.151616][T10113] System zones: 1-12 [ 123.160474][T10113] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.2672: corrupted in-inode xattr: e_value size too large [ 123.193367][T10113] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2672: couldn't read orphan inode 15 (err -117) [ 123.222174][T10113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.236146][ T9967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.288969][ T8259] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.308316][ T29] audit: type=1326 audit(1757102336.586:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eb8aebe9 code=0x7ffc0000 [ 123.332461][ T29] audit: type=1326 audit(1757102336.586:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eb8aebe9 code=0x7ffc0000 [ 123.479879][T10134] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2684'. [ 123.542134][T10142] loop0: detected capacity change from 0 to 512 [ 123.548899][T10142] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.556048][T10142] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.568244][T10142] EXT4-fs (loop0): 1 truncate cleaned up [ 123.575236][T10142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.625934][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.634821][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.667590][T10147] loop1: detected capacity change from 0 to 512 [ 123.677114][T10147] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.691417][T10147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 123.702926][T10147] System zones: 1-12 [ 123.707922][T10147] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2689: corrupted in-inode xattr: e_value size too large [ 123.723709][T10147] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2689: couldn't read orphan inode 15 (err -117) [ 123.741885][T10147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.778729][ T9967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.928161][T10170] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2699'. [ 123.997985][T10173] loop1: detected capacity change from 0 to 8192 [ 124.357651][T10186] loop9: detected capacity change from 0 to 512 [ 124.382063][T10186] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 124.408268][T10186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 124.430276][T10186] System zones: 1-12 [ 124.441098][T10186] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.2705: corrupted in-inode xattr: e_value size too large [ 124.479918][T10186] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2705: couldn't read orphan inode 15 (err -117) [ 124.522855][T10186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.551002][ T9777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.580264][ T8941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.906625][T10214] loop0: detected capacity change from 0 to 512 [ 124.914298][T10214] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.922361][T10214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.933713][T10214] EXT4-fs (loop0): 1 truncate cleaned up [ 124.940380][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.946037][T10216] loop8: detected capacity change from 0 to 512 [ 124.960535][T10216] journal_path: Non-blockdev passed as './bus' [ 124.967016][T10216] EXT4-fs: error: could not find journal device path [ 125.084170][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.096071][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.764116][T10246] loop9: detected capacity change from 0 to 128 [ 125.774959][T10241] loop8: detected capacity change from 0 to 8192 [ 125.791216][T10246] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.814818][T10246] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.941857][ T8941] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.022586][ T9777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.143144][T10279] ipvlan2: entered promiscuous mode [ 126.160905][T10281] loop0: detected capacity change from 0 to 128 [ 126.167678][T10279] bridge0: port 3(ipvlan2) entered blocking state [ 126.174391][T10279] bridge0: port 3(ipvlan2) entered disabled state [ 126.196870][T10281] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.219621][T10279] ipvlan2: entered allmulticast mode [ 126.225007][T10279] bridge0: entered allmulticast mode [ 126.240740][T10279] ipvlan2: left allmulticast mode [ 126.246099][T10279] bridge0: left allmulticast mode [ 126.254432][T10281] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.330350][ T9777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.395041][T10287] loop0: detected capacity change from 0 to 128 [ 126.403722][T10287] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.420098][T10287] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.458097][T10287] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.2750: bg 0: bad block bitmap checksum [ 126.487828][ T9777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.491816][T10292] loop1: detected capacity change from 0 to 512 [ 126.513980][T10292] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.521110][T10292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.549810][T10292] EXT4-fs (loop1): 1 truncate cleaned up [ 126.556388][T10292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.060745][T10292] ================================================================== [ 127.069389][T10292] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 127.077999][T10292] [ 127.080659][T10292] write to 0xffff888106fb9c9c of 4 bytes by task 10300 on cpu 1: [ 127.088455][T10292] xas_set_mark+0x12b/0x140 [ 127.093471][T10292] __folio_start_writeback+0x1dd/0x440 [ 127.098974][T10292] ext4_bio_write_folio+0x5ad/0x9f0 [ 127.104698][T10292] mpage_process_page_bufs+0x4a1/0x620 [ 127.110236][T10292] mpage_prepare_extent_to_map+0x786/0xc00 [ 127.116406][T10292] ext4_do_writepages+0xa05/0x2750 [ 127.121871][T10292] ext4_writepages+0x176/0x300 [ 127.126737][T10292] do_writepages+0x1c6/0x310 [ 127.131545][T10292] file_write_and_wait_range+0x156/0x2c0 [ 127.137260][T10292] generic_buffers_fsync_noflush+0x45/0x120 [ 127.143328][T10292] ext4_sync_file+0x1ab/0x690 [ 127.148085][T10292] vfs_fsync_range+0x10d/0x130 [ 127.153033][T10292] ext4_buffered_write_iter+0x34f/0x3c0 [ 127.158579][T10292] ext4_file_write_iter+0xdbf/0xf00 [ 127.163807][T10292] iter_file_splice_write+0x663/0xa60 [ 127.169647][T10292] direct_splice_actor+0x153/0x2a0 [ 127.174758][T10292] splice_direct_to_actor+0x30f/0x680 [ 127.180152][T10292] do_splice_direct+0xda/0x150 [ 127.184991][T10292] do_sendfile+0x380/0x650 [ 127.189428][T10292] __x64_sys_sendfile64+0x105/0x150 [ 127.195007][T10292] x64_sys_call+0x2bb0/0x2ff0 [ 127.199945][T10292] do_syscall_64+0xd2/0x200 [ 127.204808][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.210778][T10292] [ 127.213299][T10292] read to 0xffff888106fb9c9c of 4 bytes by task 10292 on cpu 0: [ 127.221149][T10292] filemap_write_and_wait_range+0xfc/0x340 [ 127.227068][T10292] filemap_invalidate_pages+0xa4/0x1a0 [ 127.232910][T10292] kiocb_invalidate_pages+0x6e/0x80 [ 127.238192][T10292] __iomap_dio_rw+0x5d4/0x1250 [ 127.242955][T10292] iomap_dio_rw+0x40/0x90 [ 127.247316][T10292] ext4_file_write_iter+0xad9/0xf00 [ 127.252861][T10292] iter_file_splice_write+0x663/0xa60 [ 127.258663][T10292] direct_splice_actor+0x153/0x2a0 [ 127.263776][T10292] splice_direct_to_actor+0x30f/0x680 [ 127.269485][T10292] do_splice_direct+0xda/0x150 [ 127.274323][T10292] do_sendfile+0x380/0x650 [ 127.278758][T10292] __x64_sys_sendfile64+0x105/0x150 [ 127.284084][T10292] x64_sys_call+0x2bb0/0x2ff0 [ 127.288759][T10292] do_syscall_64+0xd2/0x200 [ 127.293359][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.299333][T10292] [ 127.301731][T10292] value changed: 0x0a000021 -> 0x04000021 [ 127.307698][T10292] [ 127.310089][T10292] Reported by Kernel Concurrency Sanitizer on: [ 127.316324][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.1.2754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.326404][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.336634][T10292] ================================================================== [ 127.427433][ T9967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.