last executing test programs: 1m7.700420857s ago: executing program 2 (id=1267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1m7.663531387s ago: executing program 2 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m7.634255528s ago: executing program 2 (id=1270): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r3) 1m6.885855319s ago: executing program 2 (id=1294): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x1f00, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1001, 0x8b}]) 1m6.632308016s ago: executing program 2 (id=1304): syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1m6.391845953s ago: executing program 2 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000840), &(0x7f0000000000)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 1m6.391559933s ago: executing program 32 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000840), &(0x7f0000000000)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 51.887109304s ago: executing program 5 (id=1690): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) write$cgroup_int(r3, 0x0, 0x2) 51.860341254s ago: executing program 5 (id=1692): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 51.742687828s ago: executing program 5 (id=1695): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 51.583696352s ago: executing program 5 (id=1696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x1f00, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1001, 0x8b}]) 51.231120142s ago: executing program 5 (id=1701): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) sendfile(r1, r0, 0x0, 0x7fffeff9) 50.446025064s ago: executing program 5 (id=1710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x10) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) close(r1) 50.445736123s ago: executing program 33 (id=1710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x10) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) close(r1) 3.571366149s ago: executing program 3 (id=2774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x29}, 0x94) socket$kcm(0x23, 0x2, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 3.476381262s ago: executing program 3 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000280), &(0x7f0000000400)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x4, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 3.312230797s ago: executing program 3 (id=2785): syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 3.263283618s ago: executing program 3 (id=2787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) 3.21440307s ago: executing program 3 (id=2789): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.36160412s ago: executing program 1 (id=2848): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085ec00008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rxrpc_local\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 1.317368562s ago: executing program 1 (id=2849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 1.199398855s ago: executing program 1 (id=2852): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3]}, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) waitid(0x0, 0x0, 0x0, 0xe, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0xfffffffffffffffd, 0x100000669a, 0x1, 0x6, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x6, 0x3, 0x0, 0x7fbfffff}, 0x0, 0x0) 1.181107886s ago: executing program 6 (id=2854): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x100, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000040)={0x0, 0xaee4, 0x100, 0xfffffffe, 0x221}, &(0x7f0000000000), &(0x7f00000000c0)) 1.139718077s ago: executing program 6 (id=2855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) 923.077629ms ago: executing program 6 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) 922.606959ms ago: executing program 4 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 737.271269ms ago: executing program 4 (id=2859): epoll_create(0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, &(0x7f0000000300)="f8", 0x1, 0x4c895, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 718.1181ms ago: executing program 4 (id=2861): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000540)={0x23, 0x1, 0x2, 0x2001, 0x0, 0xffffffff, 0x0}) 554.334949ms ago: executing program 0 (id=2864): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085ec00008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rxrpc_local\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 538.23379ms ago: executing program 0 (id=2865): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x0) 527.479461ms ago: executing program 0 (id=2867): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000002, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x3, 0x0, 0x1, 0xcf9, 0x0, 0x6, 0x7}, 0x0, 0x0, 0x0) 468.171234ms ago: executing program 0 (id=2868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4010, r0, 0x874a4000) sendmsg$nl_route(r2, 0x0, 0x200440c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) 467.543414ms ago: executing program 0 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000000000400048028000380d8fd010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) 344.245701ms ago: executing program 1 (id=2869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8696}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 343.607081ms ago: executing program 0 (id=2880): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3]}, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) waitid(0x0, 0x0, 0x0, 0xe, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0xfffffffffffffffd, 0x100000669a, 0x1, 0x6, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x6, 0x3, 0x0, 0x7fbfffff}, 0x0, 0x0) 303.681724ms ago: executing program 1 (id=2870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x29}, 0x94) socket$kcm(0x23, 0x2, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 283.027225ms ago: executing program 1 (id=2871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) 187.1687ms ago: executing program 4 (id=2872): r0 = socket$packet(0x11, 0x3, 0x300) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}], 0x1, 0x0, 0x0) 76.823256ms ago: executing program 6 (id=2873): epoll_create(0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, &(0x7f0000000300)="f8", 0x1, 0x4c895, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 76.592576ms ago: executing program 3 (id=2874): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) 76.063826ms ago: executing program 4 (id=2885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 33.179009ms ago: executing program 6 (id=2875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 32.940999ms ago: executing program 4 (id=2876): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x190da) unshare(0x22020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r1, 0x0, 0x0) 0s ago: executing program 6 (id=2877): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1e1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 8:3329): avc: denied { name_bind } for pid=7816 comm="syz.4.1681" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.053115][ T7804] EXT4-fs (loop3): Remounting filesystem read-only [ 100.061828][ T29] audit: type=1400 audit(1763538052.818:3330): avc: denied { node_bind } for pid=7816 comm="syz.4.1681" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.089098][ T29] audit: type=1400 audit(1763538052.818:3331): avc: denied { setopt } for pid=7816 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.110513][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.134035][ T29] audit: type=1326 audit(1763538052.938:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 100.139448][ T7822] loop4: detected capacity change from 0 to 1024 [ 100.164869][ T7822] EXT4-fs: Ignoring removed orlov option [ 100.172451][ T7822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.189576][ T29] audit: type=1326 audit(1763538052.938:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 100.213250][ T29] audit: type=1326 audit(1763538052.938:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbabde3f703 code=0x7ffc0000 [ 100.236539][ T29] audit: type=1326 audit(1763538052.938:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbabde3e17f code=0x7ffc0000 [ 100.300468][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.339335][ T7812] bio_check_eod: 317 callbacks suppressed [ 100.339350][ T7812] kmmpd-loop3: attempt to access beyond end of device [ 100.339350][ T7812] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 100.358711][ T7812] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 100.390663][ T7830] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1685'. [ 100.399826][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'. [ 100.441504][ T7832] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.501255][ T7832] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.552297][ T7832] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.613237][ T7832] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.671640][ T3616] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.700688][ T3616] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708943][ T3616] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.732247][ T3616] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.895135][ T7847] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7847 comm=syz.5.1695 [ 100.939106][ T7847] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1695'. [ 101.027387][ T7850] loop5: detected capacity change from 0 to 1024 [ 101.060181][ T7850] EXT4-fs: Ignoring removed nobh option [ 101.069805][ T7850] EXT4-fs: Ignoring removed bh option [ 101.091683][ T7850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.162972][ T7856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 101.169503][ T7856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.177218][ T7856] vhci_hcd vhci_hcd.0: Device attached [ 101.190402][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.230002][ T7850] loop5: detected capacity change from 1024 to 64 [ 101.238909][ T7850] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1696: corrupted xattr entries [ 101.277320][ T7850] EXT4-fs (loop5): Remounting filesystem read-only [ 101.412396][ T6866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.434910][ T7854] kmmpd-loop5: attempt to access beyond end of device [ 101.434910][ T7854] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 101.448447][ T7854] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 101.456883][ T10] usb 4-1: SetAddress Request (2) to port 0 [ 101.473039][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 101.537047][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 101.637968][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.645076][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.669986][ T7859] bridge_slave_0: entered allmulticast mode [ 101.678149][ T7859] bridge_slave_0: entered promiscuous mode [ 101.700764][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.707828][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.722151][ T7859] bridge_slave_1: entered allmulticast mode [ 101.728685][ T7859] bridge_slave_1: entered promiscuous mode [ 101.760555][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.793500][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.833601][ T7859] team0: Port device team_slave_0 added [ 101.841382][ T7859] team0: Port device team_slave_1 added [ 101.863098][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.870171][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.870559][ T7895] loop4: detected capacity change from 0 to 1024 [ 101.896181][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.969744][ T7857] vhci_hcd: connection reset by peer [ 101.970607][ T7895] EXT4-fs: Ignoring removed orlov option [ 101.985360][ T3616] vhci_hcd: stop threads [ 101.989602][ T3616] vhci_hcd: release socket [ 101.994043][ T3616] vhci_hcd: disconnect device [ 101.995286][ T7895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.044399][ T4416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.060884][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.067912][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.077410][ T7898] loop0: detected capacity change from 0 to 512 [ 102.093913][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.127375][ T4416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.141196][ T7859] hsr_slave_0: entered promiscuous mode [ 102.147416][ T7859] hsr_slave_1: entered promiscuous mode [ 102.153481][ T7859] debugfs: 'hsr0' already exists in 'hsr' [ 102.159199][ T7859] Cannot create hsr debugfs directory [ 102.174375][ T4416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.209879][ T7898] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.257015][ T7898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.257104][ T4416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.317076][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.328348][ T7859] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.365335][ T7859] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.382998][ T7912] wireguard0: entered promiscuous mode [ 102.388505][ T7912] wireguard0: entered allmulticast mode [ 102.412236][ T7859] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.442484][ T4416] bridge_slave_1: left allmulticast mode [ 102.448182][ T4416] bridge_slave_1: left promiscuous mode [ 102.453914][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.476093][ T4416] bridge_slave_0: left allmulticast mode [ 102.481891][ T4416] bridge_slave_0: left promiscuous mode [ 102.487610][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.666378][ T7930] loop0: detected capacity change from 0 to 1024 [ 102.673741][ T7930] EXT4-fs: Ignoring removed nobh option [ 102.679322][ T7930] EXT4-fs: Ignoring removed bh option [ 102.692466][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.702546][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.715128][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.748163][ T4416] bond0 (unregistering): Released all slaves [ 102.767958][ T7859] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.780290][ T7930] loop0: detected capacity change from 1024 to 64 [ 102.793129][ T7930] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.1719: corrupted xattr entries [ 102.805862][ T7930] EXT4-fs (loop0): Remounting filesystem read-only [ 102.813556][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.827502][ T4416] hsr_slave_0: left promiscuous mode [ 102.835370][ T4416] hsr_slave_1: left promiscuous mode [ 102.841077][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.848514][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.856037][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.863508][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.873266][ T4416] veth0_macvtap: left promiscuous mode [ 102.878813][ T4416] veth1_vlan: left promiscuous mode [ 102.884129][ T4416] veth0_vlan: left promiscuous mode [ 102.901158][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.911600][ T7933] kmmpd-loop0: attempt to access beyond end of device [ 102.911600][ T7933] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 102.925207][ T7933] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 102.953360][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 102.963324][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 103.036484][ T7859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.044839][ T7859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.055026][ T7859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.063978][ T7903] chnl_net:caif_netlink_parms(): no params data found [ 103.073335][ T7859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.097888][ T7942] wireguard0: entered promiscuous mode [ 103.103407][ T7942] wireguard0: entered allmulticast mode [ 103.142759][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.150047][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.157235][ T7903] bridge_slave_0: entered allmulticast mode [ 103.163691][ T7903] bridge_slave_0: entered promiscuous mode [ 103.170610][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.177652][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.184846][ T7903] bridge_slave_1: entered allmulticast mode [ 103.191231][ T7903] bridge_slave_1: entered promiscuous mode [ 103.210283][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.221029][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.242989][ T7903] team0: Port device team_slave_0 added [ 103.255606][ T7903] team0: Port device team_slave_1 added [ 103.287659][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.294640][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.320734][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.334103][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.341063][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.366984][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.401686][ T7903] hsr_slave_0: entered promiscuous mode [ 103.407635][ T7903] hsr_slave_1: entered promiscuous mode [ 103.413419][ T7903] debugfs: 'hsr0' already exists in 'hsr' [ 103.419133][ T7903] Cannot create hsr debugfs directory [ 103.470736][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 103.480663][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.540526][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.547577][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.555214][ T7944] bridge_slave_0: entered allmulticast mode [ 103.561658][ T7944] bridge_slave_0: entered promiscuous mode [ 103.568856][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.578502][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.585618][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.592883][ T7944] bridge_slave_1: entered allmulticast mode [ 103.599389][ T7944] bridge_slave_1: entered promiscuous mode [ 103.617131][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.628161][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.641432][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.648470][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.667561][ T7944] team0: Port device team_slave_0 added [ 103.678510][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.685617][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.694189][ T7944] team0: Port device team_slave_1 added [ 103.713592][ T7903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.722454][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.729384][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.755750][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.768014][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.774979][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.800917][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.812015][ T7903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.821023][ T7903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.830397][ T7903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.866581][ T7944] hsr_slave_0: entered promiscuous mode [ 103.873814][ T7944] hsr_slave_1: entered promiscuous mode [ 103.879554][ T7944] debugfs: 'hsr0' already exists in 'hsr' [ 103.885323][ T7944] Cannot create hsr debugfs directory [ 103.960704][ T7944] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.975332][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.990911][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.999096][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.010287][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.017374][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.029306][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.036443][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.046924][ T7944] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.074367][ T7903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.084790][ T7903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.121722][ T7944] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.153314][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.162341][ T7944] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.183268][ T7859] veth0_vlan: entered promiscuous mode [ 104.192224][ T7859] veth1_vlan: entered promiscuous mode [ 104.210679][ T7859] veth0_macvtap: entered promiscuous mode [ 104.219095][ T7859] veth1_macvtap: entered promiscuous mode [ 104.237255][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.259365][ T7944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.270874][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.283350][ T4407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.292309][ T7944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.301422][ T4407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.310329][ T7944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.319155][ T7944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.328938][ T4407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.341881][ T4407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.363746][ T7903] veth0_vlan: entered promiscuous mode [ 104.378987][ T7903] veth1_vlan: entered promiscuous mode [ 104.422213][ T7903] veth0_macvtap: entered promiscuous mode [ 104.453777][ T8014] loop3: detected capacity change from 0 to 1024 [ 104.462794][ T7903] veth1_macvtap: entered promiscuous mode [ 104.469755][ T8014] EXT4-fs: Ignoring removed orlov option [ 104.485316][ T8014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.504768][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.520225][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.542089][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.552069][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.573020][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.597935][ T4407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.611421][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.618578][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.631591][ T4407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.650111][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.654292][ T8022] loop1: detected capacity change from 0 to 512 [ 104.657222][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.688860][ T4407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.698297][ T8022] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.708358][ T7944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.718818][ T7944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.753033][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.769479][ T4416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.848962][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.853767][ T8020] loop3: detected capacity change from 0 to 32768 [ 104.863907][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.889553][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 104.898562][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 104.915332][ T8020] loop3: p1 p2 p3 < p5 p6 > [ 104.928585][ T8020] loop3: p1 size 242222080 extends beyond EOD, truncated [ 104.953676][ T8020] loop3: p2 start 4294967295 is beyond EOD, truncated [ 104.998559][ T7944] veth0_vlan: entered promiscuous mode [ 105.007001][ T8047] netlink: 'syz.1.1726': attribute type 4 has an invalid length. [ 105.014865][ T8047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1726'. [ 105.030475][ T8042] wg2: entered promiscuous mode [ 105.035397][ T8042] wg2: entered allmulticast mode [ 105.043301][ T7944] veth1_vlan: entered promiscuous mode [ 105.056107][ T8047] .`: renamed from bond0 (while UP) [ 105.103947][ T7944] veth0_macvtap: entered promiscuous mode [ 105.120700][ T7944] veth1_macvtap: entered promiscuous mode [ 105.137944][ T8054] loop3: detected capacity change from 0 to 512 [ 105.149662][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.173902][ T8054] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.185436][ T8054] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.195707][ T8054] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1727: Corrupt directory, running e2fsck is recommended [ 105.210291][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.227924][ T4424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.241420][ T4424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.260850][ T4424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.285828][ T8054] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 105.297513][ T4424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.303275][ T8054] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1727: corrupted in-inode xattr: invalid ea_ino [ 105.324751][ T8054] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1727: couldn't read orphan inode 15 (err -117) [ 105.337246][ T8054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.339866][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 105.339913][ T29] audit: type=1326 audit(1763538058.148:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.358071][ T8054] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.391076][ T8054] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.401175][ T8054] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1727: Corrupt directory, running e2fsck is recommended [ 105.417729][ T29] audit: type=1326 audit(1763538058.188:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.441231][ T29] audit: type=1326 audit(1763538058.188:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.443495][ T8054] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.464716][ T29] audit: type=1326 audit(1763538058.188:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.464745][ T29] audit: type=1326 audit(1763538058.188:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.476256][ T8054] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.499629][ T29] audit: type=1326 audit(1763538058.188:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.522938][ T8054] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1727: Corrupt directory, running e2fsck is recommended [ 105.533009][ T29] audit: type=1326 audit(1763538058.188:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.577669][ T8054] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.592898][ T29] audit: type=1326 audit(1763538058.188:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.604385][ T8054] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.604405][ T8054] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1727: Corrupt directory, running e2fsck is recommended [ 105.646918][ T8054] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.650903][ T29] audit: type=1326 audit(1763538058.198:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.650973][ T29] audit: type=1326 audit(1763538058.198:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 105.710301][ T8054] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1727: path /2/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 105.756285][ T8079] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 105.758855][ T8054] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 64: comm syz.3.1727: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.764144][ T8079] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1739'. [ 105.871473][ T8091] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1742'. [ 105.899830][ T8091] netlink: zone id is out of range [ 105.904980][ T8091] netlink: zone id is out of range [ 105.922338][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.953146][ T8095] loop4: detected capacity change from 0 to 512 [ 105.961575][ T8091] netlink: set zone limit has 8 unknown bytes [ 105.972966][ T8095] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.011890][ T8095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.057954][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.220919][ T8099] loop6: detected capacity change from 0 to 32768 [ 106.290452][ T8099] loop6: p1 p2 p3 < p5 p6 > [ 106.295173][ T8099] loop6: p1 size 242222080 extends beyond EOD, truncated [ 106.312515][ T8099] loop6: p2 start 4294967295 is beyond EOD, truncated [ 106.509883][ T10] usb 4-1: device descriptor read/8, error -110 [ 106.629898][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 106.650184][ T10] usb 4-1: enqueue for inactive port 0 [ 106.674327][ T8136] loop3: detected capacity change from 0 to 512 [ 106.680758][ T10] usb 4-1: enqueue for inactive port 0 [ 106.702339][ T8136] EXT4-fs: Ignoring removed oldalloc option [ 106.710462][ T10] usb 4-1: enqueue for inactive port 0 [ 106.731471][ T8136] EXT4-fs (loop3): 1 truncate cleaned up [ 106.750596][ T8136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.821996][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.127939][ T8151] Set syz1 is full, maxelem 65536 reached [ 107.220791][ T8154] SELinux: failed to load policy [ 107.739985][ T10] usb usb4-port1: attempt power cycle [ 107.813729][ T8200] loop6: detected capacity change from 0 to 128 [ 107.831094][ T8200] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.916041][ T8207] netlink: 'syz.4.1786': attribute type 4 has an invalid length. [ 107.923844][ T8207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1786'. [ 107.968405][ T8207] .`: renamed from bond0 (while UP) [ 108.337343][ T8242] loop0: detected capacity change from 0 to 128 [ 108.344289][ T8242] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.189880][ T8273] syzkaller0: entered allmulticast mode [ 109.200300][ T8273] syzkaller0: entered promiscuous mode [ 109.217945][ T8273] syzkaller0 (unregistering): left allmulticast mode [ 109.224675][ T8273] syzkaller0 (unregistering): left promiscuous mode [ 109.579953][ T10] usb usb4-port1: unable to enumerate USB device [ 109.765813][ T8292] loop3: detected capacity change from 0 to 8192 [ 109.890352][ T8306] loop0: detected capacity change from 0 to 1024 [ 109.897701][ T8306] EXT4-fs: Ignoring removed orlov option [ 109.906174][ T8306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.098700][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.141711][ T8314] loop0: detected capacity change from 0 to 1024 [ 110.148276][ T8314] EXT4-fs: Ignoring removed bh option [ 110.153803][ T8314] EXT4-fs: inline encryption not supported [ 110.160250][ T8314] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.172070][ T8314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 110.181016][ T8314] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1837: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.195699][ T8314] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1837: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.211098][ T8314] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1837: Failed to acquire dquot type 0 [ 110.222799][ T8314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 110.234021][ T8314] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1837: mark_inode_dirty error [ 110.246404][ T8314] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 110.257088][ T8314] EXT4-fs (loop0): 1 orphan inode deleted [ 110.263550][ T8314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.276599][ T4480] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.292789][ T4480] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:65: Failed to release dquot type 0 [ 110.324415][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 110.343317][ T8314] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1837: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.357888][ T8314] __quota_error: 231 callbacks suppressed [ 110.357905][ T8314] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 110.381554][ T29] audit: type=1326 audit(1763538063.188:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.405045][ T29] audit: type=1326 audit(1763538063.188:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.441517][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.443255][ T29] audit: type=1326 audit(1763538063.238:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.474002][ T29] audit: type=1326 audit(1763538063.238:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.497512][ T29] audit: type=1326 audit(1763538063.238:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.521096][ T29] audit: type=1326 audit(1763538063.238:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.544372][ T29] audit: type=1326 audit(1763538063.238:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 110.567842][ T29] audit: type=1326 audit(1763538063.238:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a538f6c9 code=0x7ffc0000 [ 111.084860][ T29] audit: type=1326 audit(1763538063.888:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 111.618650][ T8363] loop0: detected capacity change from 0 to 512 [ 111.625086][ T8365] loop4: detected capacity change from 0 to 1024 [ 111.630807][ T8363] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1842: EA inode hash validation failed [ 111.632818][ T8365] EXT4-fs: Ignoring removed orlov option [ 111.645220][ T8363] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1842: corrupted inode contents [ 111.652178][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.663004][ T8363] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.1842: mark_inode_dirty error [ 111.675340][ T8365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.687358][ T8363] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1842: corrupted inode contents [ 111.706875][ T8363] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1842: mark_inode_dirty error [ 111.719374][ T8363] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1842: mark inode dirty (error -117) [ 111.732422][ T8363] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 111.741712][ T8363] EXT4-fs (loop0): 1 orphan inode deleted [ 111.747919][ T8363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.803338][ T8362] delete_channel: no stack [ 111.816549][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.904709][ T8384] loop1: detected capacity change from 0 to 1024 [ 111.911673][ T8384] EXT4-fs: Ignoring removed orlov option [ 111.919840][ T8384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.150766][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.195514][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 112.204418][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 112.410803][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 112.419747][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 112.497658][ T8411] loop3: detected capacity change from 0 to 1024 [ 112.514632][ T8411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.527727][ T8411] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.541461][ T8411] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1859: lblock 0 mapped to illegal pblock 0 (length 6) [ 112.555289][ T8411] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 112.567637][ T8411] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.567637][ T8411] [ 112.578380][ T8411] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 7: comm syz.3.1859: lblock 7 mapped to illegal pblock 7 (length 9) [ 112.593932][ T8411] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 112.606351][ T8411] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.606351][ T8411] [ 112.624527][ T8417] loop1: detected capacity change from 0 to 512 [ 112.631644][ T4407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 3: invalid block bitmap [ 112.644553][ T4407] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 112.645122][ T8417] EXT4-fs: Ignoring removed i_version option [ 112.657062][ T4407] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.657062][ T4407] [ 112.658114][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.663191][ T8417] EXT4-fs: Ignoring removed bh option [ 112.717249][ T8417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.730069][ T8426] loop0: detected capacity change from 0 to 2048 [ 112.737964][ T8426] EXT4-fs: inline encryption not supported [ 112.749922][ T8417] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.781654][ T8426] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.846907][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.928603][ T8426] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1866: bg 0: block 120: padding at end of block bitmap is not set [ 112.943288][ T8426] EXT4-fs (loop0): Remounting filesystem read-only [ 112.955909][ T8451] SELinux: failed to load policy [ 112.974920][ T7944] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 113.218517][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1880'. [ 113.426882][ T8486] loop1: detected capacity change from 0 to 2048 [ 113.433400][ T8485] loop3: detected capacity change from 0 to 512 [ 113.433653][ T8486] EXT4-fs: inline encryption not supported [ 113.440257][ T8485] EXT4-fs: Ignoring removed i_version option [ 113.451525][ T8485] EXT4-fs: Ignoring removed bh option [ 113.471676][ T8486] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.491152][ T8485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.511050][ T8485] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.577673][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.620779][ T8486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1888: bg 0: block 120: padding at end of block bitmap is not set [ 113.636558][ T8486] EXT4-fs (loop1): Remounting filesystem read-only [ 113.672039][ T8502] wg2: left promiscuous mode [ 113.676682][ T8502] wg2: left allmulticast mode [ 113.697288][ T3321] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 113.725349][ T8502] wg2: entered promiscuous mode [ 113.730272][ T8502] wg2: entered allmulticast mode [ 113.803646][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 114.008445][ T8531] loop6: detected capacity change from 0 to 8192 [ 114.801000][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1913'. [ 114.812525][ T8562] loop6: detected capacity change from 0 to 512 [ 114.819114][ T8562] EXT4-fs: Ignoring removed i_version option [ 114.825212][ T8562] EXT4-fs: Ignoring removed bh option [ 114.843011][ T8562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.860194][ T8562] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.887010][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.898474][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 115.293313][ T8614] loop0: detected capacity change from 0 to 512 [ 115.328987][ T8614] EXT4-fs: Ignoring removed i_version option [ 115.335061][ T8614] EXT4-fs: Ignoring removed bh option [ 115.363981][ T8614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.417705][ T8614] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.492633][ T8637] capability: warning: `syz.1.1944' uses 32-bit capabilities (legacy support in use) [ 115.516171][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.673816][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 115.673863][ T29] audit: type=1400 audit(1763538068.478:3902): avc: denied { read } for pid=8648 comm="syz.0.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.758224][ T8657] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 115.771767][ T8657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.781027][ T8657] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 115.803936][ T29] audit: type=1400 audit(1763538068.608:3903): avc: denied { map } for pid=8659 comm="syz.6.1954" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.838552][ T29] audit: type=1400 audit(1763538068.638:3904): avc: denied { cpu } for pid=8662 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 115.929698][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'. [ 115.992853][ T8683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1963'. [ 116.006422][ T8687] loop3: detected capacity change from 0 to 512 [ 116.037354][ T8687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.050269][ T8687] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.085390][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.148508][ T29] audit: type=1400 audit(1763538068.948:3905): avc: denied { watch watch_reads } for pid=8699 comm="syz.4.1970" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 116.210401][ T29] audit: type=1400 audit(1763538069.018:3906): avc: denied { create } for pid=8706 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.230298][ T29] audit: type=1400 audit(1763538069.018:3907): avc: denied { connect } for pid=8706 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.245211][ T8709] pim6reg1: entered promiscuous mode [ 116.255097][ T8709] pim6reg1: entered allmulticast mode [ 116.458691][ T8716] loop1: detected capacity change from 0 to 512 [ 116.472339][ T8716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.485172][ T8716] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.511175][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.611804][ T8724] loop6: detected capacity change from 0 to 2048 [ 116.640222][ T7903] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 116.655050][ T7903] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 116.666640][ T29] audit: type=1400 audit(1763538069.468:3908): avc: denied { getopt } for pid=8727 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.706828][ T8732] loop1: detected capacity change from 0 to 2048 [ 116.740219][ T8732] loop1: p1 < > p4 [ 116.744670][ T8732] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.754837][ T8732] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 117.559638][ T29] audit: type=1326 audit(1763538070.358:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 117.583151][ T29] audit: type=1326 audit(1763538070.358:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 117.606599][ T29] audit: type=1326 audit(1763538070.358:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 117.639704][ T8760] loop6: detected capacity change from 0 to 1024 [ 117.647217][ T8760] EXT4-fs: Ignoring removed orlov option [ 117.687568][ T8764] loop0: detected capacity change from 0 to 512 [ 117.703040][ T8764] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.937871][ T8795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.997578][ T8799] loop0: detected capacity change from 0 to 256 [ 118.013594][ T8799] vfat: Unknown parameter 'ÿÿÿÿŽ)µÆÕš©ñ"' [ 118.183916][ T8819] loop1: detected capacity change from 0 to 512 [ 118.192224][ T8817] pim6reg1: entered promiscuous mode [ 118.197555][ T8817] pim6reg1: entered allmulticast mode [ 118.208411][ T8819] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.219929][ T8819] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 118.230074][ T8819] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2010: Corrupt directory, running e2fsck is recommended [ 118.252149][ T8819] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 118.273859][ T8819] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2010: corrupted in-inode xattr: invalid ea_ino [ 118.287737][ T8819] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2010: couldn't read orphan inode 15 (err -117) [ 118.327643][ T8819] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.339180][ T8819] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 118.349447][ T8819] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2010: Corrupt directory, running e2fsck is recommended [ 118.369377][ T8819] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.381158][ T8819] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 118.391337][ T8819] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2010: Corrupt directory, running e2fsck is recommended [ 118.431190][ T8823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2013'. [ 118.450722][ T8819] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.462352][ T8819] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 118.472570][ T8819] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2010: Corrupt directory, running e2fsck is recommended [ 118.487482][ T8819] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.502329][ T8819] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.2010: path /431/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 118.523740][ T8819] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 64: comm syz.1.2010: path /431/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.567614][ T8831] loop6: detected capacity change from 0 to 512 [ 118.574543][ T8831] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.647884][ T8836] wg2: left promiscuous mode [ 118.652641][ T8836] wg2: left allmulticast mode [ 118.670945][ T8836] wg2: entered promiscuous mode [ 118.675865][ T8836] wg2: entered allmulticast mode [ 118.758467][ T8850] loop1: detected capacity change from 0 to 1024 [ 118.766503][ T8850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.773560][ T8850] EXT4-fs: Ignoring removed orlov option [ 118.779377][ T8850] ext2: Bad value for 'mb_optimize_scan' [ 118.825764][ T8857] loop0: detected capacity change from 0 to 512 [ 118.848892][ T8857] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.865752][ T8864] ip6gre1: entered allmulticast mode [ 118.901866][ T8868] loop0: detected capacity change from 0 to 2048 [ 118.934632][ T7944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 118.950141][ T7944] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.995936][ T8876] loop0: detected capacity change from 0 to 1024 [ 119.005153][ T8876] EXT4-fs: Ignoring removed orlov option [ 119.014266][ T8878] loop3: detected capacity change from 0 to 1024 [ 119.030257][ T8878] EXT4-fs: Ignoring removed orlov option [ 119.359145][ T8906] batadv_slave_1: entered promiscuous mode [ 119.363362][ T8904] loop3: detected capacity change from 0 to 2048 [ 119.367613][ T8906] batman_adv: batadv0: Adding interface: macvlan2 [ 119.377709][ T8906] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.405985][ T8906] batman_adv: batadv0: Interface activated: macvlan2 [ 119.435557][ T8912] loop0: detected capacity change from 0 to 512 [ 119.455301][ T8912] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.460306][ T7859] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 119.480989][ T7859] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 119.607376][ T8916] geneve2: entered promiscuous mode [ 119.612732][ T8916] geneve2: entered allmulticast mode [ 119.618721][ T8920] loop4: detected capacity change from 0 to 1024 [ 119.627039][ T8920] EXT4-fs: Ignoring removed orlov option [ 119.721285][ T8932] lo speed is unknown, defaulting to 1000 [ 119.728300][ T8932] lo speed is unknown, defaulting to 1000 [ 119.734615][ T8932] lo speed is unknown, defaulting to 1000 [ 119.772040][ T8936] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 119.772194][ T8932] infiniband syz2: set active [ 119.784611][ T8932] infiniband syz2: added lo [ 119.789131][ T3394] lo speed is unknown, defaulting to 1000 [ 119.803700][ T3394] lo speed is unknown, defaulting to 1000 [ 119.809604][ T3394] syz2: Port: 1 Link DOWN [ 119.817675][ T8932] RDS/IB: syz2: added [ 119.827094][ T8936] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 119.842045][ T8932] smc: adding ib device syz2 with port count 1 [ 119.848499][ T3394] lo speed is unknown, defaulting to 1000 [ 119.873403][ T8932] smc: ib device syz2 port 1 has no pnetid [ 119.882198][ T9] lo speed is unknown, defaulting to 1000 [ 119.887948][ T9] syz2: Port: 1 Link ACTIVE [ 119.892697][ T10] lo speed is unknown, defaulting to 1000 [ 119.898710][ T8932] lo speed is unknown, defaulting to 1000 [ 119.931621][ T8935] xt_CT: No such helper "netbios-ns" [ 119.937505][ T8932] lo speed is unknown, defaulting to 1000 [ 119.970555][ T8932] lo speed is unknown, defaulting to 1000 [ 120.011362][ T8943] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2058'. [ 120.036240][ T8932] lo speed is unknown, defaulting to 1000 [ 120.097427][ T8932] lo speed is unknown, defaulting to 1000 [ 120.156309][ T8932] lo speed is unknown, defaulting to 1000 [ 120.190245][ T8932] lo speed is unknown, defaulting to 1000 [ 120.209888][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 120.228053][ T8932] lo speed is unknown, defaulting to 1000 [ 120.263732][ T8970] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2071'. [ 120.508738][ T8995] loop1: detected capacity change from 0 to 128 [ 120.515903][ T8995] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.528334][ T8995] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.557777][ T4424] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.671066][ T9012] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 120.685873][ T9012] bond0: entered promiscuous mode [ 120.689622][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 120.689640][ T29] audit: type=1326 audit(1763538073.488:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.691108][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.699628][ T29] audit: type=1326 audit(1763538073.498:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.745664][ T9012] bond0: (slave bridge4): making interface the new active one [ 120.758587][ T9012] bridge4: entered promiscuous mode [ 120.763925][ T29] audit: type=1326 audit(1763538073.528:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.767686][ T9012] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 120.787500][ T29] audit: type=1326 audit(1763538073.528:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.787530][ T29] audit: type=1326 audit(1763538073.568:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.843281][ T29] audit: type=1326 audit(1763538073.608:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.866798][ T29] audit: type=1326 audit(1763538073.628:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.890334][ T29] audit: type=1326 audit(1763538073.648:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.6.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 120.936208][ T9019] ip6tnl1: entered promiscuous mode [ 120.941477][ T9019] ip6tnl1: entered allmulticast mode [ 120.959299][ T29] audit: type=1400 audit(1763538073.758:4084): avc: denied { watch_reads } for pid=9021 comm="syz.1.2093" path="/452/file0" dev="tmpfs" ino=2375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.010307][ T9025] bridge: RTM_NEWNEIGH with invalid ether address [ 121.061945][ T9034] netlink: 'syz.6.2098': attribute type 21 has an invalid length. [ 121.070406][ T9034] netlink: 'syz.6.2098': attribute type 1 has an invalid length. [ 121.078180][ T9034] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2098'. [ 121.120042][ T29] audit: type=1400 audit(1763538073.928:4085): avc: denied { append } for pid=9036 comm="syz.4.2099" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.146286][ T9037] program syz.4.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.213484][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 121.506853][ T9072] sd 0:0:1:0: device reset [ 121.886611][ T9078] loop1: detected capacity change from 0 to 1024 [ 121.893459][ T9078] EXT4-fs: Ignoring removed orlov option [ 122.007256][ T9092] syz_tun: entered allmulticast mode [ 122.017694][ T9092] dvmrp6: entered allmulticast mode [ 122.028092][ T9090] syz_tun: left allmulticast mode [ 122.035089][ T9095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2120'. [ 122.076869][ T36] IPVS: starting estimator thread 0... [ 122.120811][ T9104] loop4: detected capacity change from 0 to 512 [ 122.143594][ T9104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.171309][ T9096] IPVS: using max 2496 ests per chain, 124800 per kthread [ 122.201447][ T9104] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 122.238831][ T9104] EXT4-fs (loop4): 1 truncate cleaned up [ 122.339607][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2134'. [ 122.339582][ T4436] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.361285][ T9120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.369143][ T9119] bridge: RTM_NEWNEIGH with invalid ether address [ 122.369357][ T9116] Bluetooth: hci0: Frame reassembly failed (-90) [ 122.394303][ T9120] macvlan2: entered promiscuous mode [ 122.399682][ T9120] macvlan2: entered allmulticast mode [ 122.418681][ T9120] bond1: (slave macvlan2): Opening slave failed [ 122.505577][ T9132] loop6: detected capacity change from 0 to 1024 [ 122.515088][ T9132] EXT4-fs: Ignoring removed bh option [ 122.522184][ T9132] EXT4-fs: inline encryption not supported [ 122.528441][ T9132] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.539493][ T9132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 122.548499][ T9132] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2138: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.553686][ T9135] bridge0: entered promiscuous mode [ 122.567795][ T9135] macsec1: entered promiscuous mode [ 122.568034][ T9132] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2138: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.575127][ T9135] bridge0: port 3(macsec1) entered blocking state [ 122.590199][ T9132] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2138: Failed to acquire dquot type 0 [ 122.595549][ T9135] bridge0: port 3(macsec1) entered disabled state [ 122.613350][ T9132] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 122.614550][ T9135] macsec1: entered allmulticast mode [ 122.623453][ T9132] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2138: mark_inode_dirty error [ 122.623576][ T9132] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 122.628849][ T9135] bridge0: entered allmulticast mode [ 122.640448][ T9132] EXT4-fs (loop6): 1 orphan inode deleted [ 122.664526][ T9135] macsec1: left allmulticast mode [ 122.669556][ T9135] bridge0: left allmulticast mode [ 122.669845][ T4480] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.689094][ T4480] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:65: Failed to release dquot type 0 [ 122.689180][ T9135] bridge0: left promiscuous mode [ 122.715572][ T7903] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 122.728515][ T7903] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 122.738725][ T7903] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 123.321909][ T9147] loop6: detected capacity change from 0 to 1024 [ 123.328731][ T9147] EXT4-fs: Ignoring removed orlov option [ 123.334427][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2146'. [ 123.365106][ T9154] loop3: detected capacity change from 0 to 1024 [ 123.383843][ T9154] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.406194][ T9154] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.2147: lblock 0 mapped to illegal pblock 0 (length 6) [ 123.420711][ T9154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 123.433005][ T9154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.433005][ T9154] [ 123.444573][ T9154] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 7: comm syz.3.2147: lblock 7 mapped to illegal pblock 7 (length 9) [ 123.459461][ T9154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 123.471788][ T9154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.471788][ T9154] [ 123.493639][ T3616] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 3: invalid block bitmap [ 123.510986][ T3616] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 123.523394][ T3616] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.523394][ T3616] [ 123.597040][ T9163] SELinux: failed to load policy [ 123.624687][ T9170] loop0: detected capacity change from 0 to 1024 [ 123.638864][ T9170] EXT4-fs: inline encryption not supported [ 123.644758][ T9170] EXT4-fs: Ignoring removed orlov option [ 123.657831][ T9170] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.682549][ T9170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 123.691761][ T9170] System zones: 0-1, 3-12 [ 123.719687][ T9178] syzkaller0: entered promiscuous mode [ 123.838208][ T9194] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 123.844876][ T9194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.853472][ T9194] vhci_hcd vhci_hcd.0: Device attached [ 123.861489][ T9194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.870987][ T9194] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 123.877626][ T9194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.885362][ T9194] vhci_hcd vhci_hcd.0: Device attached [ 123.891605][ T9200] vhci_hcd: connection closed [ 123.891658][ T9195] vhci_hcd: connection closed [ 123.896600][ T4480] vhci_hcd: stop threads [ 123.905526][ T4480] vhci_hcd: release socket [ 123.909957][ T4480] vhci_hcd: disconnect device [ 123.914799][ T4480] vhci_hcd: stop threads [ 123.919024][ T4480] vhci_hcd: release socket [ 123.923482][ T4480] vhci_hcd: disconnect device [ 124.156860][ T9206] geneve2: entered promiscuous mode [ 124.162218][ T9206] geneve2: entered allmulticast mode [ 124.206860][ T9208] loop1: detected capacity change from 0 to 1024 [ 124.214355][ T9208] EXT4-fs: Ignoring removed orlov option [ 124.349794][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 124.350718][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.556558][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 124.629085][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 124.662626][ T9240] team0 (unregistering): Port device team_slave_0 removed [ 124.682144][ T9240] team0 (unregistering): Port device team_slave_1 removed [ 124.750704][ T9255] loop4: detected capacity change from 0 to 512 [ 124.771263][ T9255] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.817335][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 124.827303][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 124.884263][ T9268] loop3: detected capacity change from 0 to 256 [ 124.892564][ T9268] FAT-fs (loop3): bogus number of FAT sectors [ 124.898685][ T9268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 124.917002][ T9270] netlink: 'syz.1.2191': attribute type 3 has an invalid length. [ 126.910268][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 126.910975][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.936824][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 126.936839][ T29] audit: type=1326 audit(1763538079.738:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 126.972718][ T29] audit: type=1326 audit(1763538079.768:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 126.997164][ T9322] netlink: 'syz.3.2212': attribute type 27 has an invalid length. [ 126.997166][ T29] audit: type=1326 audit(1763538079.768:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbabde3f703 code=0x7ffc0000 [ 126.997193][ T29] audit: type=1326 audit(1763538079.768:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbabde3f703 code=0x7ffc0000 [ 127.054070][ T29] audit: type=1326 audit(1763538079.768:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.078425][ T29] audit: type=1326 audit(1763538079.768:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.102914][ T29] audit: type=1326 audit(1763538079.768:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.127235][ T29] audit: type=1326 audit(1763538079.768:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.151761][ T29] audit: type=1326 audit(1763538079.768:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.176288][ T29] audit: type=1326 audit(1763538079.768:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 127.312030][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.319262][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.413881][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.447481][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.657466][ T9] lo speed is unknown, defaulting to 1000 [ 127.663295][ T9] syz2: Port: 1 Link DOWN [ 127.678640][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.703941][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.713897][ T9326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.739391][ T3616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.751848][ T9333] lo speed is unknown, defaulting to 1000 [ 127.755638][ T3616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.757604][ T9333] syz2: Port: 1 Link ACTIVE [ 127.773114][ T7886] lo speed is unknown, defaulting to 1000 [ 127.804334][ T9355] loop3: detected capacity change from 0 to 512 [ 127.839567][ T3616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.857425][ T9358] lo speed is unknown, defaulting to 1000 [ 127.872629][ T9355] EXT4-fs mount: 38 callbacks suppressed [ 127.872645][ T9355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.923909][ T3616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.938435][ T9355] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.966101][ T9355] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2217: corrupted inode contents [ 127.978344][ T9355] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2217: mark_inode_dirty error [ 128.003870][ T9355] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2217: corrupted inode contents [ 128.019677][ T9374] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2217: corrupted inode contents [ 128.035468][ T9374] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2217: mark_inode_dirty error [ 128.047067][ T9374] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2217: corrupted inode contents [ 128.059855][ T9374] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2217: mark_inode_dirty error [ 128.071704][ T9374] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2217: corrupted inode contents [ 128.086871][ T9374] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2217: mark_inode_dirty error [ 128.086853][ T9370] lo speed is unknown, defaulting to 1000 [ 128.115776][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.177021][ T9383] loop3: detected capacity change from 0 to 128 [ 128.246356][ T9383] gtp: attempt to access beyond end of device [ 128.246356][ T9383] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 128.253301][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.269381][ T9390] netlink: 'syz.1.2229': attribute type 16 has an invalid length. [ 128.277339][ T9390] netlink: 'syz.1.2229': attribute type 17 has an invalid length. [ 128.286815][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.358963][ T9390] 8021q: adding VLAN 0 to HW filter on device .` [ 128.378333][ T9390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.583693][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 128.596709][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 128.656604][ T9417] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2242'. [ 128.705002][ T9426] loop0: detected capacity change from 0 to 512 [ 128.723665][ T9426] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2246: Failed to acquire dquot type 1 [ 128.740700][ T9426] EXT4-fs (loop0): 1 truncate cleaned up [ 128.761070][ T9426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.774054][ T9426] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.821056][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.872927][ T9453] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 128.878051][ T9455] loop1: detected capacity change from 0 to 512 [ 128.889650][ T9457] loop0: detected capacity change from 0 to 512 [ 128.891549][ T9449] loop3: detected capacity change from 0 to 4096 [ 128.897506][ T9455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.903590][ T9453] ipvlan0: entered allmulticast mode [ 128.913116][ T9457] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2260: inode has both inline data and extents flags [ 128.917007][ T9453] veth0_vlan: entered allmulticast mode [ 128.917689][ T9449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.931011][ T9457] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2260: couldn't read orphan inode 15 (err -117) [ 128.931398][ T9457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.938350][ T9453] team0: Device ipvlan0 failed to register rx_handler [ 128.951476][ T9455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.988516][ T9455] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.001445][ T9449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.056780][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.081519][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.116330][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.201478][ T9484] loop0: detected capacity change from 0 to 512 [ 129.212200][ T9484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.226852][ T9484] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.250981][ T9484] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2271: corrupted inode contents [ 129.277069][ T9484] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2271: mark_inode_dirty error [ 129.290777][ T9484] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2271: corrupted inode contents [ 129.308916][ T9494] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2271: corrupted inode contents [ 129.323668][ T9494] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2271: mark_inode_dirty error [ 129.337882][ T9494] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2271: corrupted inode contents [ 129.356512][ T9494] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2271: mark_inode_dirty error [ 129.369070][ T9494] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2271: corrupted inode contents [ 129.381580][ T9494] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2271: mark_inode_dirty error [ 129.410651][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.442608][ T9506] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 129.450731][ T9500] loop4: detected capacity change from 0 to 2048 [ 129.451040][ T9500] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.491468][ T9505] lo speed is unknown, defaulting to 1000 [ 129.554239][ T4416] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.603949][ T9527] loop4: detected capacity change from 0 to 512 [ 129.611810][ T9527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.645681][ T9527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.664722][ T9527] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.712430][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.936310][ T9568] loop3: detected capacity change from 0 to 512 [ 129.951724][ T9568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.982119][ T9568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.994960][ T9568] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.025074][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.055110][ T9585] netlink: 'syz.6.2313': attribute type 10 has an invalid length. [ 130.063978][ T9585] ipvlan0: entered allmulticast mode [ 130.069275][ T9585] veth0_vlan: entered allmulticast mode [ 130.078344][ T9585] team0: Device ipvlan0 failed to register rx_handler [ 130.213593][ T9607] loop1: detected capacity change from 0 to 512 [ 130.224064][ T9607] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2332: inode has both inline data and extents flags [ 130.250142][ T9607] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2332: couldn't read orphan inode 15 (err -117) [ 130.275734][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.320006][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.985666][ T9615] loop6: detected capacity change from 0 to 512 [ 131.000242][ T9615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.032170][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.048039][ T9615] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.083756][ T9627] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 131.092653][ T9627] ipvlan0: entered allmulticast mode [ 131.098005][ T9627] veth0_vlan: entered allmulticast mode [ 131.101526][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.113196][ T9627] team0: Device ipvlan0 failed to register rx_handler [ 131.629997][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.630791][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 131.679533][ T9640] syzkaller0: entered allmulticast mode [ 131.694554][ T9640] syzkaller0: entered promiscuous mode [ 131.704947][ T9640] syzkaller0 (unregistering): left allmulticast mode [ 131.711682][ T9640] syzkaller0 (unregistering): left promiscuous mode [ 131.727837][ T9644] loop6: detected capacity change from 0 to 2048 [ 131.734985][ T9644] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 131.761010][ T9645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9645 comm=syz.3.2339 [ 131.805754][ T9653] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2342'. [ 131.815803][ T9653] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2342'. [ 131.907776][ T9662] syzkaller0: entered allmulticast mode [ 131.916396][ T9662] syzkaller0: entered promiscuous mode [ 131.928860][ T4424] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.939225][ T9662] syzkaller0 (unregistering): left allmulticast mode [ 131.946147][ T9662] syzkaller0 (unregistering): left promiscuous mode [ 132.011686][ T9671] netlink: 'syz.1.2348': attribute type 10 has an invalid length. [ 132.067530][ T9682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9682 comm=syz.0.2354 [ 132.087566][ T9684] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2355'. [ 132.096753][ T9684] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2355'. [ 132.148902][ T9694] loop6: detected capacity change from 0 to 512 [ 132.156872][ T9694] EXT4-fs: Ignoring removed i_version option [ 132.163989][ T9694] EXT4-fs: Ignoring removed bh option [ 132.185408][ T9694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.198326][ T9694] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.213138][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 132.213151][ T29] audit: type=1400 audit(1763538085.018:4612): avc: denied { sqpoll } for pid=9693 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.276036][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.368910][ T9715] loop1: detected capacity change from 0 to 512 [ 132.385736][ T9715] EXT4-fs: Ignoring removed i_version option [ 132.391934][ T9715] EXT4-fs: Ignoring removed bh option [ 132.411632][ T9715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.439928][ T9715] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.524800][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.576666][ T29] audit: type=1400 audit(1763538085.378:4613): avc: denied { nlmsg_write } for pid=9724 comm="syz.1.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 132.614783][ T9725] lo speed is unknown, defaulting to 1000 [ 132.789425][ T29] audit: type=1400 audit(1763538085.588:4614): avc: denied { create } for pid=9727 comm="syz.4.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.078307][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'. [ 133.175272][ T9734] loop0: detected capacity change from 0 to 512 [ 133.187126][ T9734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.203870][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.225104][ T9734] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.277565][ T9743] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2375'. [ 133.286837][ T9743] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2375'. [ 133.301317][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.358956][ T29] audit: type=1400 audit(1763538086.158:4615): avc: denied { mounton } for pid=9745 comm="syz.0.2389" path="/147/bus" dev="tmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.399017][ T9747] loop0: detected capacity change from 0 to 1024 [ 133.413585][ T9747] EXT4-fs: Ignoring removed orlov option [ 133.419756][ T29] audit: type=1326 audit(1763538086.218:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0136ef6c9 code=0x7ffc0000 [ 133.443307][ T29] audit: type=1326 audit(1763538086.218:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0136ef6c9 code=0x7ffc0000 [ 133.467270][ T29] audit: type=1326 audit(1763538086.218:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0136ef6c9 code=0x7ffc0000 [ 133.490848][ T29] audit: type=1400 audit(1763538086.218:4619): avc: denied { mounton } for pid=9745 comm="syz.0.2389" path="/147/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.514929][ T29] audit: type=1326 audit(1763538086.218:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0136ef6c9 code=0x7ffc0000 [ 133.538386][ T29] audit: type=1326 audit(1763538086.218:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0136ef6c9 code=0x7ffc0000 [ 133.573313][ T9747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.600474][ T9747] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.672665][ T9755] loop4: detected capacity change from 0 to 512 [ 133.687234][ T9755] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2381: EA inode hash validation failed [ 133.703163][ T9755] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2381: corrupted inode contents [ 133.729298][ T9755] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.2381: mark_inode_dirty error [ 133.774659][ T9755] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2381: corrupted inode contents [ 133.810717][ T9755] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.2381: mark_inode_dirty error [ 133.862337][ T9755] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.2381: mark inode dirty (error -117) [ 133.900277][ T9755] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 133.918766][ T9755] EXT4-fs (loop4): 1 orphan inode deleted [ 133.931740][ T9755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.956344][ T9754] delete_channel: no stack [ 133.958648][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 133.960844][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.994887][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.140637][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2386'. [ 134.194556][ T9772] loop1: detected capacity change from 0 to 512 [ 134.205066][ T9772] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2399: EA inode hash validation failed [ 134.247732][ T9772] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2399: corrupted inode contents [ 134.285131][ T9772] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2399: mark_inode_dirty error [ 134.345216][ T9772] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2399: corrupted inode contents [ 134.365343][ T9783] SELinux: failed to load policy [ 134.371575][ T9772] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2399: mark_inode_dirty error [ 134.385981][ T9772] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2399: mark inode dirty (error -117) [ 134.399667][ T9772] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 134.412102][ T9772] EXT4-fs (loop1): 1 orphan inode deleted [ 134.418237][ T9772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.438373][ T9771] delete_channel: no stack [ 134.457418][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'. [ 134.466647][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 134.476886][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.486931][ T4416] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.496667][ T4416] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.506390][ T9787] loop3: detected capacity change from 0 to 1024 [ 134.513543][ T9787] EXT4-fs: Ignoring removed orlov option [ 134.520828][ T4416] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.522383][ T9787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.543457][ T9787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.550806][ T4416] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.647659][ T4416] Bluetooth: hci0: Frame reassembly failed (-90) [ 134.749957][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.759119][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.374425][ T9825] loop1: detected capacity change from 0 to 1024 [ 135.381160][ T9825] EXT4-fs: Ignoring removed orlov option [ 135.388646][ T9825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.402298][ T9825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.228218][ T4407] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.239661][ T4407] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.248704][ T4407] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.257733][ T4407] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.669779][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 136.670730][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.722021][ T9838] lo speed is unknown, defaulting to 1000 [ 136.960122][ T9842] __nla_validate_parse: 9 callbacks suppressed [ 136.960212][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2416'. [ 137.048993][ T9879] bridge: RTM_NEWNEIGH with invalid ether address [ 137.112193][ T4407] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.115739][ T9885] loop3: detected capacity change from 0 to 512 [ 137.135327][ T9885] EXT4-fs: Ignoring removed i_version option [ 137.141403][ T9885] EXT4-fs: Ignoring removed bh option [ 137.183974][ T9885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.228232][ T9885] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.250990][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 137.251003][ T29] audit: type=1400 audit(1763538090.058:4831): avc: denied { append } for pid=9882 comm="syz.3.2434" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.287712][ T9885] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 137.323777][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.329729][ T29] audit: type=1400 audit(1763538090.088:4832): avc: denied { mac_admin } for pid=9882 comm="syz.3.2434" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.354755][ T29] audit: type=1400 audit(1763538090.108:4833): avc: denied { relabelto } for pid=9882 comm="syz.3.2434" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_var_run_t:s0" [ 137.395350][ T29] audit: type=1400 audit(1763538090.198:4834): avc: denied { connect } for pid=9896 comm="syz.6.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.477802][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2443'. [ 137.592568][ T29] audit: type=1400 audit(1763538090.398:4835): avc: denied { execute } for pid=9908 comm="syz.3.2445" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 137.823265][ T29] audit: type=1400 audit(1763538090.628:4836): avc: denied { read } for pid=9925 comm="syz.4.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.893765][ T29] audit: type=1400 audit(1763538090.688:4837): avc: denied { read } for pid=9933 comm="syz.0.2454" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 137.919076][ T29] audit: type=1400 audit(1763538090.688:4838): avc: denied { open } for pid=9933 comm="syz.0.2454" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.279236][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 138.287451][ T9952] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 138.306043][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.338383][ T9952] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 138.733965][ T29] audit: type=1400 audit(1763538091.538:4839): avc: denied { bind } for pid=9974 comm="syz.4.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.844367][ T29] audit: type=1326 audit(1763538091.648:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabde3f6c9 code=0x7ffc0000 [ 139.119072][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2483'. [ 139.139809][ T9997] team0: Port device team_slave_1 removed [ 139.149834][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 139.152581][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.704870][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 139.768827][T10042] team0: Port device team_slave_1 removed [ 140.213444][T10074] loop6: detected capacity change from 0 to 128 [ 140.234839][T10074] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.259881][T10074] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.341624][ T7903] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.482613][T10088] wg2: entered promiscuous mode [ 140.487563][T10088] wg2: entered allmulticast mode [ 140.503241][T10087] lo speed is unknown, defaulting to 1000 [ 140.579543][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 140.956393][T10116] loop4: detected capacity change from 0 to 2048 [ 141.032665][T10116] loop4: p1 < > p4 [ 141.041163][T10116] loop4: p4 size 8388608 extends beyond EOD, truncated [ 141.065626][T10116] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.271988][T10126] wg2: entered promiscuous mode [ 141.276894][T10126] wg2: entered allmulticast mode [ 141.611579][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 141.621597][T10139] team0: Port device team_slave_1 removed [ 141.644505][T10141] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2540'. [ 141.843214][T10179] geneve2: entered promiscuous mode [ 141.848515][T10179] geneve2: entered allmulticast mode [ 141.868468][T10181] ip6gre1: entered allmulticast mode [ 141.904040][T10185] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 141.960329][T10188] batadv_slave_1: entered promiscuous mode [ 141.967590][T10188] batman_adv: batadv0: Adding interface: macvlan0 [ 141.974057][T10188] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.002321][T10188] batman_adv: batadv0: Interface activated: macvlan0 [ 142.009938][T10192] rdma_rxe: rxe_newlink: failed to add lo [ 142.016843][T10192] netlink: 'syz.4.2561': attribute type 4 has an invalid length. [ 142.040974][T10195] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2563'. [ 142.057575][T10192] netlink: 'syz.4.2561': attribute type 4 has an invalid length. [ 142.068354][T10199] loop1: detected capacity change from 0 to 128 [ 142.085299][T10199] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.102822][T10199] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.175373][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.218520][T10218] rdma_rxe: rxe_newlink: failed to add lo [ 142.227824][T10217] geneve2: entered promiscuous mode [ 142.234082][T10217] geneve2: entered allmulticast mode [ 142.234432][T10218] netlink: 'syz.0.2581': attribute type 4 has an invalid length. [ 142.260793][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 142.260807][ T29] audit: type=1326 audit(1763538095.068:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.300156][ T29] audit: type=1326 audit(1763538095.068:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.323691][ T29] audit: type=1326 audit(1763538095.068:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.347256][ T29] audit: type=1326 audit(1763538095.068:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.370849][ T29] audit: type=1326 audit(1763538095.068:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.394340][ T29] audit: type=1326 audit(1763538095.068:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.400272][T10218] netlink: 'syz.0.2581': attribute type 4 has an invalid length. [ 142.417964][ T29] audit: type=1326 audit(1763538095.068:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.449163][ T29] audit: type=1326 audit(1763538095.068:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.472844][ T29] audit: type=1326 audit(1763538095.068:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.496453][ T29] audit: type=1326 audit(1763538095.068:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.6.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363c42f6c9 code=0x7ffc0000 [ 142.572829][T10232] loop6: detected capacity change from 0 to 128 [ 142.591441][T10232] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.612696][T10232] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.637345][T10241] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2584'. [ 142.681029][ T4407] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.706333][T10252] loop6: detected capacity change from 0 to 1024 [ 142.713727][T10252] EXT4-fs: Ignoring removed orlov option [ 142.724647][T10252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.921707][T10268] rdma_rxe: rxe_newlink: failed to add lo [ 142.929083][T10268] netlink: 'syz.1.2593': attribute type 4 has an invalid length. [ 142.984256][T10268] netlink: 'syz.1.2593': attribute type 4 has an invalid length. [ 143.072665][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.151243][T10283] program syz.1.2602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.173258][T10286] loop0: detected capacity change from 0 to 128 [ 143.187475][T10286] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.201394][T10286] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.212322][T10289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2603'. [ 143.244529][ T4424] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.372944][T10304] loop0: detected capacity change from 0 to 1024 [ 143.386646][T10304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.393285][T10304] EXT4-fs: Ignoring removed orlov option [ 143.398974][T10304] ext2: Bad value for 'mb_optimize_scan' [ 143.538431][T10319] loop6: detected capacity change from 0 to 512 [ 143.554402][T10319] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 143.568703][T10323] loop3: detected capacity change from 0 to 128 [ 143.575829][T10323] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.585720][T10319] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 143.602087][T10323] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.613422][T10319] EXT4-fs (loop6): 1 truncate cleaned up [ 143.619405][T10319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.633722][ T4436] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.681318][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.772931][T10344] bridge: RTM_NEWNEIGH with invalid ether address [ 143.804646][T10346] netlink: 'syz.3.2628': attribute type 21 has an invalid length. [ 143.814071][T10346] netlink: 'syz.3.2628': attribute type 1 has an invalid length. [ 143.822906][T10346] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2628'. [ 143.851817][T10349] loop4: detected capacity change from 0 to 128 [ 143.865185][T10349] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.878224][T10349] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.888964][T10353] program syz.3.2629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.919580][ T4436] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.017141][T10370] lo: entered allmulticast mode [ 144.028907][T10370] dvmrp6: entered allmulticast mode [ 144.038598][T10369] lo: left allmulticast mode [ 144.058901][T10374] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2641'. [ 144.068223][ T9333] IPVS: starting estimator thread 0... [ 144.119022][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2642'. [ 144.159920][T10375] IPVS: using max 2544 ests per chain, 127200 per kthread [ 144.217362][T10386] bridge: RTM_NEWNEIGH with invalid ether address [ 144.228766][T10389] program syz.0.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.253954][T10393] sd 0:0:1:0: device reset [ 144.254606][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 144.283801][T10392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.305906][T10392] macvlan2: entered promiscuous mode [ 144.311317][T10392] macvlan2: entered allmulticast mode [ 144.318143][T10392] bond2: (slave macvlan2): Opening slave failed [ 144.346153][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'. [ 144.383667][T10408] loop3: detected capacity change from 0 to 512 [ 144.398501][T10408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.419403][T10408] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 144.448967][T10408] EXT4-fs (loop3): 1 truncate cleaned up [ 144.460329][T10408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.499673][ T7859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.509028][T10420] loop0: detected capacity change from 0 to 1024 [ 144.523057][T10420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.535237][T10420] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.551441][T10420] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.2670: lblock 0 mapped to illegal pblock 0 (length 6) [ 144.565209][T10420] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 144.573945][T10426] program syz.6.2661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.577697][T10420] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.577697][T10420] [ 144.598604][T10420] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 7: comm syz.0.2670: lblock 7 mapped to illegal pblock 7 (length 9) [ 144.612994][T10420] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 144.625267][T10420] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.625267][T10420] [ 144.654078][ T4407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 3: invalid block bitmap [ 144.668592][ T4407] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 144.683046][ T4407] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.683046][ T4407] [ 144.695799][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.718565][T10434] sd 0:0:1:0: device reset [ 144.770392][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2671'. [ 144.809365][T10450] loop0: detected capacity change from 0 to 1024 [ 144.818084][T10450] EXT4-fs: Ignoring removed orlov option [ 144.824492][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 144.838545][T10450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.966559][T10458] loop1: detected capacity change from 0 to 512 [ 144.973870][T10458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.985185][T10458] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 145.000029][T10458] EXT4-fs (loop1): 1 truncate cleaned up [ 145.006146][T10458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.032077][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.054222][T10461] loop1: detected capacity change from 0 to 1024 [ 145.061066][T10461] EXT4-fs: inline encryption not supported [ 145.066922][T10461] EXT4-fs: Ignoring removed orlov option [ 145.073064][T10461] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 145.091946][T10461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 145.100178][T10461] System zones: 0-1, 3-12 [ 145.104991][T10461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.117812][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.144948][T10465] syzkaller0: entered promiscuous mode [ 145.153019][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.447994][T10482] bridge0: entered promiscuous mode [ 145.454563][T10482] macsec0: entered promiscuous mode [ 145.461475][T10482] bridge0: port 3(macsec0) entered blocking state [ 145.467920][T10482] bridge0: port 3(macsec0) entered disabled state [ 145.475903][T10482] macsec0: entered allmulticast mode [ 145.482646][T10482] bridge0: entered allmulticast mode [ 145.488430][T10482] macsec0: left allmulticast mode [ 145.494787][T10482] bridge0: left allmulticast mode [ 145.501622][T10482] bridge0: left promiscuous mode [ 145.572419][ T9] IPVS: starting estimator thread 0... [ 145.659812][T10485] IPVS: using max 2688 ests per chain, 134400 per kthread [ 146.195101][T10490] syz_tun: entered allmulticast mode [ 146.217597][T10490] dvmrp6: entered allmulticast mode [ 146.227977][T10487] syz_tun: left allmulticast mode [ 146.252549][T10501] loop0: detected capacity change from 0 to 512 [ 146.265337][T10501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.288061][T10501] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 146.309080][T10507] loop1: detected capacity change from 0 to 1024 [ 146.316175][T10501] EXT4-fs (loop0): 1 truncate cleaned up [ 146.316564][T10501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.340247][T10507] EXT4-fs: Ignoring removed orlov option [ 146.342784][ T7944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.348972][T10507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.453109][T10515] loop4: detected capacity change from 0 to 1024 [ 146.500678][T10515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.514706][T10515] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.534071][T10515] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2693: lblock 0 mapped to illegal pblock 0 (length 6) [ 146.547856][T10515] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 146.560177][T10515] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.560177][T10515] [ 146.587668][T10515] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 7: comm syz.4.2693: lblock 7 mapped to illegal pblock 7 (length 9) [ 146.629417][T10515] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 146.641820][T10515] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.641820][T10515] [ 146.693485][ T4407] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 3: invalid block bitmap [ 146.709400][ T4407] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 146.721786][ T4407] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.721786][ T4407] [ 146.734869][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.775417][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.881191][T10547] Bluetooth: hci0: Frame reassembly failed (-90) [ 146.887905][ T4424] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.949339][T10555] ip6gre2: entered promiscuous mode [ 146.954741][T10555] ip6gre2: entered allmulticast mode [ 147.303884][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 147.303898][ T29] audit: type=1400 audit(1763538100.108:5175): avc: denied { tracepoint } for pid=10582 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.354883][ T29] audit: type=1400 audit(1763538100.118:5176): avc: denied { create } for pid=10584 comm="syz.6.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.376465][ T29] audit: type=1400 audit(1763538100.118:5177): avc: denied { connect } for pid=10584 comm="syz.6.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.397942][ T29] audit: type=1400 audit(1763538100.118:5178): avc: denied { name_connect } for pid=10584 comm="syz.6.2728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 147.420259][ T29] audit: type=1400 audit(1763538100.138:5179): avc: denied { listen } for pid=10584 comm="syz.6.2728" lport=53774 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.444721][ T29] audit: type=1400 audit(1763538100.138:5180): avc: denied { accept } for pid=10584 comm="syz.6.2728" lport=53774 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.468872][ T29] audit: type=1400 audit(1763538100.138:5181): avc: denied { setopt } for pid=10584 comm="syz.6.2728" lport=53774 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.494468][ T29] audit: type=1400 audit(1763538100.158:5182): avc: denied { map } for pid=10586 comm="syz.6.2729" path="socket:[31704]" dev="sockfs" ino=31704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 147.581760][ T29] audit: type=1400 audit(1763538100.378:5183): avc: denied { execmem } for pid=10594 comm="syz.4.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.603043][ T29] audit: type=1400 audit(1763538100.378:5184): avc: denied { cmd } for pid=10594 comm="syz.4.2734" path="socket:[31734]" dev="sockfs" ino=31734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.485398][T10625] __nla_validate_parse: 5 callbacks suppressed [ 148.485487][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 148.517532][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 148.530859][T10627] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2758'. [ 148.607399][T10639] loop0: detected capacity change from 0 to 256 [ 148.617937][T10639] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.654794][T10643] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2754'. [ 148.676154][T10644] lo speed is unknown, defaulting to 1000 [ 148.714223][T10650] loop6: detected capacity change from 0 to 512 [ 148.753310][T10655] bridge0: entered promiscuous mode [ 148.759796][T10655] bridge0: port 1(macvtap0) entered blocking state [ 148.766331][T10655] bridge0: port 1(macvtap0) entered disabled state [ 148.772943][T10655] macvtap0: entered allmulticast mode [ 148.778319][T10655] bridge0: entered allmulticast mode [ 148.780355][T10657] loop6: detected capacity change from 0 to 512 [ 148.784020][T10655] macvtap0: left allmulticast mode [ 148.795107][T10655] bridge0: left allmulticast mode [ 148.797248][T10657] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.814412][T10657] EXT4-fs (loop6): 1 truncate cleaned up [ 148.820250][T10655] bridge0: left promiscuous mode [ 148.825900][T10657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.905609][ T7903] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.909900][ T3502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.920788][ T9121] Bluetooth: hci0: command 0x1003 tx timeout [ 149.022587][ T9336] kernel write not supported for file /513/clear_refs (pid: 9336 comm: kworker/1:8) [ 149.036353][T10678] tipc: Started in network mode [ 149.043254][T10678] tipc: Node identity ac14140f, cluster identity 4711 [ 149.054049][T10678] tipc: New replicast peer: 255.255.255.255 [ 149.062106][T10678] tipc: Enabled bearer , priority 10 [ 149.070983][T10685] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2775'. [ 149.081092][T10685] netlink: zone id is out of range [ 149.086222][T10685] netlink: zone id is out of range [ 149.091901][T10685] netlink: zone id is out of range [ 149.097180][T10685] netlink: zone id is out of range [ 149.103132][T10683] netlink: 'syz.3.2774': attribute type 1 has an invalid length. [ 149.137870][T10685] netlink: set zone limit has 8 unknown bytes [ 149.222106][T10705] loop4: detected capacity change from 0 to 128 [ 149.237530][T10705] ext4 filesystem being mounted at /578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.344227][T10715] EXT4-fs (loop4): shut down requested (2) [ 149.429157][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2788'. [ 149.441074][T10719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2788'. [ 149.485319][T10719] bridge0: port 1(vlan2) entered blocking state [ 149.492946][T10719] bridge0: port 1(vlan2) entered disabled state [ 149.521368][T10719] vlan2: entered allmulticast mode [ 149.526531][T10719] bridge0: entered allmulticast mode [ 149.554488][T10719] vlan2: left allmulticast mode [ 149.559395][T10719] bridge0: left allmulticast mode [ 149.612373][T10736] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 149.691142][T10750] loop6: detected capacity change from 0 to 128 [ 149.707331][T10752] loop4: detected capacity change from 0 to 512 [ 149.813186][T10752] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.906020][T10767] lo speed is unknown, defaulting to 1000 [ 150.061319][ T3409] tipc: Node number set to 2886997007 [ 150.082791][T10784] loop4: detected capacity change from 0 to 512 [ 150.102733][T10784] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.370794][T10818] vhci_hcd: invalid port number 96 [ 150.376422][T10818] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 150.426282][T10832] netlink: 'syz.0.2833': attribute type 3 has an invalid length. [ 150.519611][T10849] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2837'. [ 151.171338][T10866] siw: device registration error -23 [ 151.222161][T10873] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.232185][T10873] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.397212][T10873] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.407440][T10873] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.452994][T10873] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.462880][T10873] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.512062][T10873] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.521902][T10873] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.566304][ T3616] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.574554][ T3616] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.585775][ T3616] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.594038][ T3616] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.605719][ T3616] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.613969][ T3616] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.625449][ T3616] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.633781][ T3616] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.916973][T10909] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 152.163463][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 152.172574][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2878'. [ 152.183793][T10925] bridge0: port 3(vlan0) entered blocking state [ 152.190290][T10925] bridge0: port 3(vlan0) entered disabled state [ 152.196692][T10925] vlan0: entered allmulticast mode [ 152.201904][T10925] bridge0: entered allmulticast mode [ 152.207530][T10925] vlan0: left allmulticast mode [ 152.212404][T10925] bridge0: left allmulticast mode [ 152.288188][ T3408] kernel write not supported for file /1395/clear_refs (pid: 3408 comm: kworker/0:3) [ 152.299091][T10930] tipc: New replicast peer: 255.255.255.255 [ 152.306431][T10930] tipc: Enabled bearer , priority 10 [ 152.327850][T10933] netlink: 'syz.1.2870': attribute type 1 has an invalid length. [ 152.352757][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 152.352772][ T29] audit: type=1326 audit(1763538105.158:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.1.2871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0136ef6c9 code=0x0 [ 152.632685][T10951] ================================================================== [ 152.640797][T10951] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 152.647725][T10951] [ 152.650040][T10951] read-write to 0xffff888138431dec of 4 bytes by task 10942 on cpu 0: [ 152.658171][T10951] fifo_open+0x86/0x5d0 [ 152.662325][T10951] do_dentry_open+0x649/0xa20 [ 152.666985][T10951] vfs_open+0x37/0x1e0 [ 152.671036][T10951] path_openat+0x1c5e/0x2170 [ 152.675620][T10951] do_filp_open+0x109/0x230 [ 152.680107][T10951] do_sys_openat2+0xa6/0x110 [ 152.684681][T10951] __x64_sys_openat+0xf2/0x120 [ 152.689426][T10951] x64_sys_call+0x2eab/0x3000 [ 152.694092][T10951] do_syscall_64+0xd2/0x200 [ 152.698755][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.705163][T10951] [ 152.707477][T10951] read to 0xffff888138431dec of 4 bytes by task 10951 on cpu 1: [ 152.715087][T10951] wait_for_partner+0xb5/0x1c0 [ 152.719849][T10951] fifo_open+0x4b1/0x5d0 [ 152.724080][T10951] do_dentry_open+0x649/0xa20 [ 152.728738][T10951] vfs_open+0x37/0x1e0 [ 152.732792][T10951] path_openat+0x1c5e/0x2170 [ 152.737378][T10951] do_filp_open+0x109/0x230 [ 152.741865][T10951] do_sys_openat2+0xa6/0x110 [ 152.746446][T10951] __se_sys_openat2+0x194/0x1f0 [ 152.751278][T10951] __x64_sys_openat2+0x55/0x70 [ 152.756023][T10951] x64_sys_call+0x1121/0x3000 [ 152.760688][T10951] do_syscall_64+0xd2/0x200 [ 152.765173][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.771051][T10951] [ 152.773351][T10951] value changed: 0x00000001 -> 0x00000002 [ 152.779048][T10951] [ 152.781352][T10951] Reported by Kernel Concurrency Sanitizer on: [ 152.787483][T10951] CPU: 1 UID: 0 PID: 10951 Comm: syz.3.2874 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.798838][T10951] Tainted: [W]=WARN [ 152.802623][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.812666][T10951] ================================================================== [ 152.826270][T10954] loop6: detected capacity change from 0 to 128 [ 152.838173][T10954] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.928189][T10957] EXT4-fs (loop6): shut down requested (2) [ 154.511272][ T9338] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec