last executing test programs: 1m31.270228865s ago: executing program 3 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) 1m31.024013528s ago: executing program 3 (id=11): r0 = io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10b8}, 0x20000840) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.794164991s ago: executing program 3 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 1m30.654118944s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m30.579255904s ago: executing program 3 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='ext4\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1m29.606252848s ago: executing program 3 (id=47): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m29.606119378s ago: executing program 32 (id=47): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m12.506586082s ago: executing program 0 (id=607): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,ignoreqv,access=', @ANYRESDEC=r4]) 1m12.419701953s ago: executing program 0 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000080)=0x10) 1m12.333448894s ago: executing program 0 (id=619): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') 1m12.276892215s ago: executing program 0 (id=623): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080), 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b6", 0x2) 1m12.076133918s ago: executing program 0 (id=630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="a6", 0x1}], 0x1}}], 0x2, 0x4048805) shutdown(r0, 0x1) 1m11.20620501s ago: executing program 0 (id=652): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m11.20613618s ago: executing program 33 (id=652): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m6.848849452s ago: executing program 5 (id=793): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m6.465186148s ago: executing program 5 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m6.28247748s ago: executing program 5 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fstat(r0, 0x0) 1m6.248553151s ago: executing program 5 (id=818): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)={[{@nouid32}, {@grpjquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x3, 0x56a, &(0x7f0000001900)="$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") open(&(0x7f0000000000)='./file1\x00', 0x46642, 0x21) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1284, 0x1, 0x2, 0x169}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 1m5.994860384s ago: executing program 5 (id=832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x10, 0x12, 0x105}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 1m5.346008944s ago: executing program 5 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) 1m5.313879464s ago: executing program 34 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) 45.745786382s ago: executing program 7 (id=1523): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000080000000017"], 0x54}}, 0x0) 45.716424163s ago: executing program 7 (id=1525): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', 0x0) 45.653964234s ago: executing program 7 (id=1527): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 45.616721614s ago: executing program 7 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 45.601484644s ago: executing program 7 (id=1530): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) 45.389638598s ago: executing program 7 (id=1532): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 45.389514887s ago: executing program 35 (id=1532): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 1.358776812s ago: executing program 2 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) pipe(&(0x7f0000005880)={0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) 1.310173383s ago: executing program 2 (id=3008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rmdir(&(0x7f0000000440)='./file0/../file0\x00') 1.306949903s ago: executing program 2 (id=3011): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1, 0x3}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x80, @multicast1=0xac1414aa}, 0x10) 1.268160403s ago: executing program 2 (id=3014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x82, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000740)=0x1000400) 1.218259073s ago: executing program 2 (id=3017): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)='\f7', 0x2}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x10050, &(0x7f0000000700)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@resuid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 873.600258ms ago: executing program 1 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x4082, &(0x7f0000000380)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 741.97813ms ago: executing program 6 (id=3037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xbbb839bceb8aff2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0xa}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) 741.43944ms ago: executing program 2 (id=3038): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x44}}, 0x4) 702.212281ms ago: executing program 6 (id=3041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = inotify_init1(0x800) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 668.777051ms ago: executing program 1 (id=3043): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) 633.622041ms ago: executing program 1 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 633.178141ms ago: executing program 6 (id=3047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x5}, 0x80) 558.289753ms ago: executing program 1 (id=3049): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700044000000040000000800090002"], 0x40}}, 0x0) 558.062253ms ago: executing program 6 (id=3050): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 545.341773ms ago: executing program 1 (id=3053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) 542.092393ms ago: executing program 6 (id=3054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) 466.291604ms ago: executing program 6 (id=3056): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 465.953444ms ago: executing program 1 (id=3058): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001200)={[{@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 453.684204ms ago: executing program 8 (id=3059): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0xc220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x7}, 0x2400, 0xcc, 0x52, 0x5, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 147.772889ms ago: executing program 4 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 147.602139ms ago: executing program 8 (id=3071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 147.416919ms ago: executing program 4 (id=3072): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 0s ago: executing program 4 (id=3073): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="530000000700004600ed3c6a717ac2501b4c07bf81f2f3d81817e1df3cd270971fb520d72310"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): ted capacity change from 0 to 512 [ 69.299695][ T6743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.313998][ T6743] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.340043][ T5205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.415822][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.497535][ T6767] autofs4:pid:6767:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc018937e) [ 69.512429][ T6767] autofs4:pid:6767:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 69.612456][ T6777] loop4: detected capacity change from 0 to 128 [ 69.625466][ T6778] vlan2: entered allmulticast mode [ 69.630672][ T6778] bond0: entered allmulticast mode [ 69.635945][ T6778] bond_slave_0: entered allmulticast mode [ 69.641795][ T6778] bond_slave_1: entered allmulticast mode [ 69.655531][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.655531][ T6777] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 69.668998][ T6777] Buffer I/O error on dev loop4, logical block 2065, async page read [ 69.686255][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.686255][ T6777] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 69.699750][ T6777] Buffer I/O error on dev loop4, logical block 2066, async page read [ 69.700191][ T6788] 9pnet: p9_errstr2errno: server reported unknown error @ÿÿÿÿ [ 69.710678][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.710678][ T6777] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 69.730621][ T6777] Buffer I/O error on dev loop4, logical block 2067, async page read [ 69.770305][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.770305][ T6777] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 69.783816][ T6777] Buffer I/O error on dev loop4, logical block 2068, async page read [ 69.792436][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.792436][ T6777] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 69.806637][ T6777] Buffer I/O error on dev loop4, logical block 2069, async page read [ 69.817701][ T6794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.821134][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.821134][ T6777] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 69.839436][ T6777] Buffer I/O error on dev loop4, logical block 2070, async page read [ 69.854619][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.854619][ T6777] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 69.868185][ T6777] Buffer I/O error on dev loop4, logical block 2071, async page read [ 69.880695][ T6798] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.901145][ T6777] syz.4.1304: attempt to access beyond end of device [ 69.901145][ T6777] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 69.915034][ T6777] Buffer I/O error on dev loop4, logical block 2072, async page read [ 69.925526][ T6777] Buffer I/O error on dev loop4, logical block 2065, async page read [ 69.934161][ T6777] Buffer I/O error on dev loop4, logical block 2066, async page read [ 70.025979][ T6808] loop2: detected capacity change from 0 to 1024 [ 70.074908][ T6808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.161577][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.452830][ T6848] loop2: detected capacity change from 0 to 256 [ 70.573223][ T6855] can0: slcan on ttyS3. [ 70.587098][ T6865] loop7: detected capacity change from 0 to 2048 [ 70.602841][ T6865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.621372][ T6850] can0 (unregistered): slcan off ttyS3. [ 70.667451][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 70.676452][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 70.731442][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 70.840515][ T6888] bridge_slave_0: left allmulticast mode [ 70.846391][ T6888] bridge_slave_0: left promiscuous mode [ 70.852275][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.872616][ T6888] bridge_slave_1: left allmulticast mode [ 70.878342][ T6888] bridge_slave_1: left promiscuous mode [ 70.884371][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.923958][ T6888] bond0: (slave bond_slave_0): Releasing backup interface [ 70.942893][ T6888] bond_slave_0: left allmulticast mode [ 70.950868][ T6888] bond0: (slave bond_slave_1): Releasing backup interface [ 70.961242][ T6888] bond_slave_1: left allmulticast mode [ 70.973651][ T6888] team0: Port device team_slave_0 removed [ 70.984318][ T6888] team0: Port device team_slave_1 removed [ 70.996162][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.003728][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.020271][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.028004][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.121720][ T6907] bond2: entered promiscuous mode [ 71.126847][ T6907] bond2: entered allmulticast mode [ 71.132783][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.146217][ T6907] bond2 (unregistering): Released all slaves [ 71.428614][ T6932] vlan2: entered allmulticast mode [ 71.434038][ T6932] bridge_slave_0: entered allmulticast mode [ 71.550107][ T6934] bridge_slave_0: left allmulticast mode [ 71.556050][ T6934] bridge_slave_0: left promiscuous mode [ 71.561806][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.576672][ T6934] bridge_slave_1: left allmulticast mode [ 71.582574][ T6934] bridge_slave_1: left promiscuous mode [ 71.588461][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.613501][ T6934] bond0: (slave bond_slave_0): Releasing backup interface [ 71.626965][ T6934] bond0: (slave bond_slave_1): Releasing backup interface [ 71.638458][ T6938] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.665944][ T6934] team0: Port device team_slave_0 removed [ 71.683196][ T6934] team0: Port device team_slave_1 removed [ 71.691691][ T6934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.699142][ T6934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.717562][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.743163][ T6934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.750687][ T6934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.830145][ T6934] batadv1: left promiscuous mode [ 71.835523][ T6934] bridge0: port 3(batadv1) entered disabled state [ 71.863656][ T6934] bond1: (slave veth3): Releasing backup interface [ 71.875503][ T6934] veth3: left promiscuous mode [ 71.922572][ T6942] bond3: entered promiscuous mode [ 71.927694][ T6942] bond3: entered allmulticast mode [ 71.963495][ T6942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.978276][ T6942] bond3 (unregistering): Released all slaves [ 72.095857][ T6960] loop7: detected capacity change from 0 to 512 [ 72.172440][ T6960] EXT4-fs (loop7): orphan cleanup on readonly fs [ 72.222405][ T6960] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1384: bad orphan inode 13 [ 72.273637][ T6960] ext4_test_bit(bit=12, block=18) = 1 [ 72.279221][ T6960] is_bad_inode(inode)=0 [ 72.283538][ T6960] NEXT_ORPHAN(inode)=2130706432 [ 72.288403][ T6960] max_ino=32 [ 72.291643][ T6960] i_nlink=1 [ 72.311510][ T6960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.331916][ T6960] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 72.431398][ T6960] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.506657][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.607524][ T7034] loop1: detected capacity change from 0 to 512 [ 72.623071][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.799569][ T7034] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.853641][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.032940][ T7055] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 73.039570][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.047169][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 73.061999][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 73.062054][ T29] audit: type=1326 audit(1746556714.972:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.091804][ T29] audit: type=1326 audit(1746556714.972:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.107521][ T7062] loop1: detected capacity change from 0 to 512 [ 73.125336][ T7062] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.133284][ T7062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.181064][ T29] audit: type=1326 audit(1746556715.022:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.185096][ T7062] EXT4-fs (loop1): 1 truncate cleaned up [ 73.204663][ T29] audit: type=1326 audit(1746556715.022:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.216344][ T7062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.234286][ T29] audit: type=1326 audit(1746556715.022:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.269928][ T29] audit: type=1326 audit(1746556715.032:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.293974][ T29] audit: type=1326 audit(1746556715.032:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.317674][ T29] audit: type=1326 audit(1746556715.032:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.341335][ T29] audit: type=1326 audit(1746556715.042:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.365363][ T29] audit: type=1326 audit(1746556715.042:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 73.392112][ T7056] vhci_hcd: connection closed [ 73.392381][ T6984] vhci_hcd: stop threads [ 73.401553][ T6984] vhci_hcd: release socket [ 73.406131][ T6984] vhci_hcd: disconnect device [ 73.441072][ T3380] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 73.448480][ T3380] usb 3-1: enqueue for inactive port 0 [ 73.460959][ T3380] usb 3-1: enqueue for inactive port 0 [ 73.467077][ T3380] usb 3-1: enqueue for inactive port 0 [ 73.551086][ T3380] vhci_hcd: vhci_device speed not set [ 73.656968][ T3383] IPVS: starting estimator thread 0... [ 73.686643][ T7091] loop7: detected capacity change from 0 to 512 [ 73.712118][ T7091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.726637][ T7091] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.740796][ T7091] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.1412: corrupted inode contents [ 73.752863][ T7089] IPVS: using max 2256 ests per chain, 112800 per kthread [ 73.771737][ T36] usb 15-1: enqueue for inactive port 0 [ 73.782936][ T36] usb 15-1: enqueue for inactive port 0 [ 73.800709][ T7091] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.1412: mark_inode_dirty error [ 73.816238][ T7091] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.1412: corrupted inode contents [ 73.829103][ T7091] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1412: mark_inode_dirty error [ 73.862592][ T36] vhci_hcd: vhci_device speed not set [ 73.874772][ T7098] netlink: 'syz.6.1414': attribute type 21 has an invalid length. [ 73.886376][ T7098] netlink: 'syz.6.1414': attribute type 6 has an invalid length. [ 73.894359][ T7098] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1414'. [ 73.907395][ T7096] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.1412: corrupted inode contents [ 73.919560][ T7096] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.1412: mark_inode_dirty error [ 73.935763][ T7096] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.1412: corrupted inode contents [ 73.955518][ T7091] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.1412: corrupted inode contents [ 73.970687][ T7091] EXT4-fs error (device loop7): add_dirent_to_buf:2155: inode #2: comm syz.7.1412: mark_inode_dirty error [ 74.006799][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1416'. [ 74.015960][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1416'. [ 74.026088][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.043301][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.187980][ T7119] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 74.263003][ T7121] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.303312][ T7131] loop7: detected capacity change from 0 to 1024 [ 74.342678][ T7131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.355155][ T7131] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.390140][ T7131] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 74.408637][ T7131] EXT4-fs (loop7): Remounting filesystem read-only [ 74.437746][ T7147] atomic_op ffff88810b519128 conn xmit_atomic 0000000000000000 [ 74.449521][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.462477][ T7149] geneve2: entered promiscuous mode [ 74.467775][ T7149] geneve2: entered allmulticast mode [ 74.483586][ T7151] loop7: detected capacity change from 0 to 764 [ 74.531162][ T7153] hub 2-0:1.0: USB hub found [ 74.535905][ T7153] hub 2-0:1.0: 8 ports detected [ 74.624606][ T7166] bond1: entered promiscuous mode [ 74.629894][ T7166] bond1: entered allmulticast mode [ 74.637010][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.648097][ T7166] bond1 (unregistering): Released all slaves [ 75.016858][ T7193] loop1: detected capacity change from 0 to 1764 [ 75.150953][ T7207] geneve2: entered promiscuous mode [ 75.156349][ T7207] geneve2: entered allmulticast mode [ 75.281532][ T7225] bond1: entered promiscuous mode [ 75.286731][ T7225] bond1: entered allmulticast mode [ 75.299479][ T7225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.314296][ T7225] bond1 (unregistering): Released all slaves [ 75.327386][ T7232] vcan0: entered allmulticast mode [ 75.340103][ T7232] vcan0: left allmulticast mode [ 75.364627][ T7237] pimreg: entered allmulticast mode [ 75.388461][ T7237] pimreg: left allmulticast mode [ 75.444323][ T7241] loop2: detected capacity change from 0 to 8192 [ 75.533132][ T7241] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 75.540353][ T7241] FAT-fs (loop2): Filesystem has been set read-only [ 75.552899][ T7250] loop1: detected capacity change from 0 to 128 [ 75.577581][ T7250] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 75.585639][ T7250] FAT-fs (loop1): Filesystem has been set read-only [ 75.592376][ T7250] bio_check_eod: 8 callbacks suppressed [ 75.592470][ T7250] syz.1.1483: attempt to access beyond end of device [ 75.592470][ T7250] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 75.621526][ T7250] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 75.629430][ T7250] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 75.644471][ T7252] geneve2: entered promiscuous mode [ 75.649809][ T7252] geneve2: entered allmulticast mode [ 75.679220][ T7258] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 75.769107][ T7271] loop7: detected capacity change from 0 to 512 [ 75.792916][ T7271] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.824643][ T7271] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1494: bg 0: block 64: padding at end of block bitmap is not set [ 75.855088][ T7271] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1494: Failed to acquire dquot type 0 [ 75.869639][ T7271] EXT4-fs (loop7): 1 truncate cleaned up [ 75.870273][ T7277] 9pnet_fd: Insufficient options for proto=fd [ 75.875834][ T7271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.906597][ T7271] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1494: Failed to acquire dquot type 0 [ 75.952253][ T7271] syz.7.1494 (7271) used greatest stack depth: 9344 bytes left [ 75.981254][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.046540][ T7287] gtp0: entered allmulticast mode [ 76.085122][ T7291] loop7: detected capacity change from 0 to 512 [ 76.112728][ T7291] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.162159][ T7291] EXT4-fs (loop7): 1 truncate cleaned up [ 76.168241][ T7291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.215718][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.630436][ T7296] bond0: (slave syz_tun): Releasing backup interface [ 76.641275][ T7301] loop4: detected capacity change from 0 to 512 [ 76.668172][ T7296] bridge_slave_0: left allmulticast mode [ 76.673961][ T7296] bridge_slave_0: left promiscuous mode [ 76.679920][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.693699][ T7301] EXT4-fs (loop4): 1 orphan inode deleted [ 76.705461][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.713971][ T7309] loop7: detected capacity change from 0 to 512 [ 76.718261][ T7296] bridge_slave_1: left allmulticast mode [ 76.725774][ T7023] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1 [ 76.730018][ T7296] bridge_slave_1: left promiscuous mode [ 76.747500][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.755350][ T7301] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.757056][ T7309] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.775160][ T7301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.788346][ T7296] bond0: (slave bond_slave_0): Releasing backup interface [ 76.800874][ T7296] bond0: (slave bond_slave_1): Releasing backup interface [ 76.809199][ T7309] EXT4-fs (loop7): 1 truncate cleaned up [ 76.816829][ T7309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841437][ T7296] team0: Port device team_slave_0 removed [ 76.857966][ T7296] team0: Port device team_slave_1 removed [ 76.865608][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.866399][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.873218][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.891945][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.899394][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.920902][ T7296] batadv1: left allmulticast mode [ 76.926089][ T7296] batadv1: left promiscuous mode [ 76.931368][ T7296] bridge0: port 3(batadv1) entered disabled state [ 76.951817][ T7319] bond1: entered promiscuous mode [ 76.956912][ T7319] bond1: entered allmulticast mode [ 76.964456][ T7319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.975727][ T7319] bond1 (unregistering): Released all slaves [ 77.114344][ T7339] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1523'. [ 77.175431][ T7343] loop7: detected capacity change from 0 to 8192 [ 77.186575][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 77.430487][ T6984] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.494715][ T6984] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.548187][ T6984] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.604428][ T6984] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.620411][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 77.739813][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 77.886142][ T7415] openvswitch: netlink: Message has 6 unknown bytes. [ 77.895870][ T7417] 9pnet_fd: Insufficient options for proto=fd [ 77.955020][ T6984] bond0 (unregistering): Released all slaves [ 77.978759][ T7424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.998072][ T6984] hsr_slave_0: left promiscuous mode [ 78.004915][ T6984] hsr_slave_1: left promiscuous mode [ 78.016330][ T6984] veth1_macvtap: left promiscuous mode [ 78.022984][ T6984] veth0_macvtap: left promiscuous mode [ 78.028700][ T6984] veth1_vlan: left promiscuous mode [ 78.035531][ T6984] veth0_vlan: left promiscuous mode [ 78.093946][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 78.093966][ T29] audit: type=1400 audit(1746556720.002:8248): avc: denied { write } for pid=7443 comm="syz.4.1546" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.146283][ T7449] loop4: detected capacity change from 0 to 512 [ 78.174851][ T7449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.188365][ T7449] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.223835][ T7424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.255241][ T7449] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 78.270588][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.277782][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.285707][ T7364] bridge_slave_0: entered allmulticast mode [ 78.292763][ T7449] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 78.301855][ T7364] bridge_slave_0: entered promiscuous mode [ 78.305216][ T7449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.305216][ T7449] [ 78.315711][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.320738][ T7449] EXT4-fs (loop4): Total free blocks count 0 [ 78.320758][ T7449] EXT4-fs (loop4): Free/Dirty block details [ 78.327834][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.333798][ T7449] EXT4-fs (loop4): free_blocks=65281 [ 78.333816][ T7449] EXT4-fs (loop4): dirty_blocks=1 [ 78.333829][ T7449] EXT4-fs (loop4): Block reservation details [ 78.342934][ T7364] bridge_slave_1: entered allmulticast mode [ 78.346887][ T7449] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 78.353590][ T7364] bridge_slave_1: entered promiscuous mode [ 78.404836][ T7424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.423443][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.443384][ T29] audit: type=1326 audit(1746556720.352:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.467616][ T29] audit: type=1326 audit(1746556720.352:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.491172][ T29] audit: type=1326 audit(1746556720.352:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.515155][ T29] audit: type=1326 audit(1746556720.352:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.538689][ T29] audit: type=1326 audit(1746556720.352:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.562303][ T29] audit: type=1326 audit(1746556720.352:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.586025][ T29] audit: type=1326 audit(1746556720.372:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.609950][ T29] audit: type=1326 audit(1746556720.372:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.642660][ T29] audit: type=1326 audit(1746556720.372:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f42dfa1e969 code=0x7ffc0000 [ 78.667779][ T7472] 9pnet_fd: Insufficient options for proto=fd [ 78.693392][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.705416][ T7424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.718508][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.742581][ T7364] team0: Port device team_slave_0 added [ 78.749269][ T7364] team0: Port device team_slave_1 added [ 78.774418][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.781591][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.807778][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.810902][ T7481] loop1: detected capacity change from 0 to 512 [ 78.822782][ T7424] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.834043][ T7481] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.843356][ T7481] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 78.855607][ T6984] IPVS: stop unused estimator thread 0... [ 78.865971][ T7424] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.875327][ T7481] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 78.885009][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.892087][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.902353][ T7481] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.918669][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.938160][ T7481] System zones: 0-2, 18-18, 34-35 [ 78.947960][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.988770][ T7364] hsr_slave_0: entered promiscuous mode [ 78.997349][ T7364] hsr_slave_1: entered promiscuous mode [ 79.005672][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.013702][ T7364] Cannot create hsr debugfs directory [ 79.028026][ T7424] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.039086][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.074729][ T7424] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.155213][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 79.160316][ T7364] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.188193][ T7501] bond1: entered promiscuous mode [ 79.193829][ T7501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.202189][ T7364] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.213067][ T7364] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.225183][ T7364] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.250159][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.257299][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.265315][ T7507] loop4: detected capacity change from 0 to 512 [ 79.274407][ T7507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.289031][ T7507] EXT4-fs (loop4): 1 truncate cleaned up [ 79.299409][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.301657][ T7507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.366152][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.377365][ T7514] vti0: entered promiscuous mode [ 79.389071][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.399442][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407235][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.422223][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.429526][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.504676][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.622350][ T7539] bridge0: entered promiscuous mode [ 79.629394][ T7539] batman_adv: batadv0: Adding interface: macsec1 [ 79.636161][ T7539] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.662476][ T7539] batman_adv: batadv0: Interface activated: macsec1 [ 79.670423][ T7364] veth0_vlan: entered promiscuous mode [ 79.694038][ T7364] veth1_vlan: entered promiscuous mode [ 79.722147][ T7364] veth0_macvtap: entered promiscuous mode [ 79.738691][ T7364] veth1_macvtap: entered promiscuous mode [ 79.754523][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.792788][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.810019][ T7364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.819057][ T7364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827823][ T7364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.836771][ T7364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.045001][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.097410][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1589'. [ 80.107656][ T7574] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 80.194205][ T7588] bond0: entered promiscuous mode [ 80.199277][ T7588] bond_slave_0: entered promiscuous mode [ 80.205657][ T7588] bond_slave_1: entered promiscuous mode [ 80.216061][ T7588] batadv0: entered promiscuous mode [ 80.224196][ T7588] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.237754][ T7588] bond0: left promiscuous mode [ 80.242693][ T7588] bond_slave_0: left promiscuous mode [ 80.248240][ T7588] bond_slave_1: left promiscuous mode [ 80.255835][ T7588] batadv0: left promiscuous mode [ 80.403742][ T7607] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 80.419624][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'. [ 80.430445][ T7608] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 80.490206][ T7616] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 80.519467][ T7620] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1610'. [ 80.568909][ T7626] macvlan1: entered promiscuous mode [ 80.576773][ T7626] ipvlan0: entered promiscuous mode [ 80.583457][ T7626] ipvlan0: left promiscuous mode [ 80.588678][ T7626] macvlan1: left promiscuous mode [ 81.098103][ T7691] loop8: detected capacity change from 0 to 512 [ 81.122620][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 81.125825][ T7691] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1641: bg 0: block 5: invalid block bitmap [ 81.132661][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.146429][ T7697] bridge0: entered promiscuous mode [ 81.158197][ T7691] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 81.170828][ T7697] batman_adv: batadv0: Adding interface: macsec1 [ 81.177311][ T7697] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.200147][ T7691] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1641: invalid indirect mapped block 3 (level 2) [ 81.203225][ T7697] batman_adv: batadv0: Interface activated: macsec1 [ 81.297759][ T7691] EXT4-fs (loop8): 2 truncates cleaned up [ 81.304447][ T7691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.319660][ T7701] SELinux: syz.1.1647 (7701) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.432061][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.494376][ T7717] loop4: detected capacity change from 0 to 512 [ 81.505133][ T7717] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.513061][ T7717] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1654: bad orphan inode 13 [ 81.523884][ T7717] ext4_test_bit(bit=12, block=18) = 1 [ 81.529333][ T7717] is_bad_inode(inode)=0 [ 81.533576][ T7717] NEXT_ORPHAN(inode)=2130706432 [ 81.538466][ T7717] max_ino=32 [ 81.541816][ T7717] i_nlink=1 [ 81.545756][ T7717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.575528][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.686808][ T7728] binfmt_misc: register: failed to install interpreter file ./file2 [ 82.072857][ T7747] hub 9-0:1.0: USB hub found [ 82.077578][ T7747] hub 9-0:1.0: 8 ports detected [ 82.408438][ T7767] loop1: detected capacity change from 0 to 512 [ 82.416845][ T7767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1675: bg 0: block 5: invalid block bitmap [ 82.429653][ T7767] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 82.442030][ T7767] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1675: invalid indirect mapped block 3 (level 2) [ 82.456371][ T7767] EXT4-fs (loop1): 2 truncates cleaned up [ 82.463544][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.542706][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.567602][ T7782] loop1: detected capacity change from 0 to 512 [ 82.577363][ T7782] EXT4-fs: Ignoring removed nobh option [ 82.585976][ T7782] EXT4-fs warning (device loop1): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.597611][ T7782] EXT4-fs warning (device loop1): dx_probe:851: Enable large directory feature to access it [ 82.607755][ T7782] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.1682: Corrupt directory, running e2fsck is recommended [ 82.622401][ T7782] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 82.631398][ T7782] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1682: corrupted in-inode xattr: invalid ea_ino [ 82.649374][ T7782] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1682: couldn't read orphan inode 15 (err -117) [ 82.673633][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 82.683578][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.693561][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 82.703696][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.716175][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.729579][ T7789] bridge0: entered promiscuous mode [ 82.746391][ T7789] batman_adv: batadv0: Adding interface: macsec1 [ 82.753639][ T7789] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.791620][ T7782] EXT4-fs warning (device loop1): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.795913][ T7789] batman_adv: batadv0: Interface activated: macsec1 [ 82.803277][ T7782] EXT4-fs warning (device loop1): dx_probe:851: Enable large directory feature to access it [ 82.820209][ T7782] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.1682: Corrupt directory, running e2fsck is recommended [ 82.838015][ T7782] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1682: path /367/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 82.903345][ T7782] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.1682: path /367/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 82.944680][ T7805] loop8: detected capacity change from 0 to 512 [ 82.976035][ T7808] netlink: 'syz.6.1695': attribute type 10 has an invalid length. [ 82.986394][ T7805] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 83.007679][ T7805] EXT4-fs (loop8): 1 truncate cleaned up [ 83.015505][ T7805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.031904][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.041538][ T7808] team0: Device hsr_slave_0 failed to register rx_handler [ 83.104824][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.125771][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1698'. [ 83.248459][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1707'. [ 83.384188][ T7844] loop8: detected capacity change from 0 to 128 [ 83.391395][ T7844] EXT4-fs: Ignoring removed nobh option [ 83.399779][ T7844] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.414607][ T7844] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.461252][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 83.461266][ T29] audit: type=1400 audit(1746556725.362:8399): avc: denied { write } for pid=7843 comm="syz.8.1711" name="file1" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.489617][ T29] audit: type=1400 audit(1746556725.372:8400): avc: denied { add_name } for pid=7843 comm="syz.8.1711" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.512291][ T29] audit: type=1400 audit(1746556725.422:8401): avc: denied { remove_name } for pid=7843 comm="syz.8.1711" name="file2" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.535837][ T29] audit: type=1400 audit(1746556725.422:8402): avc: denied { rename } for pid=7843 comm="syz.8.1711" name="file2" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.557838][ T29] audit: type=1400 audit(1746556725.422:8403): avc: denied { rmdir } for pid=7843 comm="syz.8.1711" name="mnt" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.579821][ T29] audit: type=1400 audit(1746556725.422:8404): avc: denied { rename } for pid=7843 comm="syz.8.1711" name="mnt" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.601564][ T29] audit: type=1400 audit(1746556725.422:8405): avc: denied { reparent } for pid=7843 comm="syz.8.1711" name="mnt" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.627526][ T7364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.666367][ T29] audit: type=1400 audit(1746556725.572:8406): avc: denied { execute } for pid=7846 comm="syz.1.1713" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 83.749496][ T29] audit: type=1400 audit(1746556725.652:8407): avc: denied { bind } for pid=7855 comm="syz.8.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.769072][ T29] audit: type=1400 audit(1746556725.652:8408): avc: denied { name_bind } for pid=7855 comm="syz.8.1718" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.953039][ T7881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.165721][ T7903] loop8: detected capacity change from 0 to 512 [ 84.219384][ T7903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.264686][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 84.293663][ T7908] IPVS: Error joining to the multicast group [ 84.299812][ T7903] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.423313][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.599957][ T7942] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1753'. [ 84.639880][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1757'. [ 84.666272][ T7945] bond3: entered promiscuous mode [ 84.671405][ T7945] bond3: entered allmulticast mode [ 84.678180][ T7946] loop2: detected capacity change from 0 to 164 [ 84.704027][ T7945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.713769][ T7946] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.741706][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 84.745561][ T7946] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.759871][ T7946] Symlink component flag not implemented [ 84.765667][ T7946] Symlink component flag not implemented [ 84.838655][ T7946] Symlink component flag not implemented (7) [ 84.844910][ T7946] Symlink component flag not implemented (116) [ 84.874807][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1762'. [ 84.907073][ T7958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.991362][ T7968] xt_hashlimit: max too large, truncated to 1048576 [ 85.108856][ T7979] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1772'. [ 85.406410][ T8003] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 85.438135][ T8005] loop8: detected capacity change from 0 to 512 [ 85.467841][ T8007] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1787'. [ 85.477894][ T8005] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.506036][ T8007] gretap0: entered promiscuous mode [ 85.519212][ T8005] EXT4-fs (loop8): mount failed [ 85.568336][ T7919] syz.4.1746 (7919) used greatest stack depth: 6208 bytes left [ 85.769813][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 85.777553][ T8043] loop8: detected capacity change from 0 to 512 [ 85.804558][ T8043] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1802: bg 0: block 248: padding at end of block bitmap is not set [ 85.826278][ T8049] loop2: detected capacity change from 0 to 512 [ 85.835485][ T8043] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.1802: Failed to acquire dquot type 1 [ 85.848886][ T8049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 85.863744][ T8043] EXT4-fs (loop8): 1 truncate cleaned up [ 85.870052][ T8043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.871836][ T8049] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.882917][ T8043] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.932092][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.945015][ T6986] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 86.230997][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.428300][ T8096] loop8: detected capacity change from 0 to 512 [ 86.447008][ T8096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.460372][ T8096] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.649272][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.690644][ T8124] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 86.756674][ T8130] loop8: detected capacity change from 0 to 512 [ 86.785067][ T8130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.808383][ T8130] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.931205][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.980010][ T8152] loop4: detected capacity change from 0 to 4096 [ 87.001641][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.100006][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1860'. [ 87.135099][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.197165][ T8189] loop1: detected capacity change from 0 to 128 [ 87.267122][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.267122][ T8198] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 87.288999][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.288999][ T8198] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.312060][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.312060][ T8198] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.351599][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.351599][ T8198] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 87.370318][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.370318][ T8198] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 87.416170][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 87.434118][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.434118][ T8198] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 87.527204][ T8218] loop8: detected capacity change from 0 to 512 [ 87.527274][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.527274][ T8198] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.527321][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.527321][ T8198] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.527428][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.527428][ T8198] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.577528][ T8198] syz.1.1870: attempt to access beyond end of device [ 87.577528][ T8198] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 87.623778][ T8218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.644819][ T8224] netlink: 'syz.4.1886': attribute type 3 has an invalid length. [ 87.650152][ T8218] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.703052][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.742394][ T8234] loop2: detected capacity change from 0 to 256 [ 87.757941][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.765315][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.777944][ T8233] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 87.804042][ T8236] bridge0: entered allmulticast mode [ 87.823975][ T8245] bridge_slave_1: left allmulticast mode [ 87.830118][ T8245] bridge_slave_1: left promiscuous mode [ 87.836306][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.850424][ T8245] bridge_slave_0: left allmulticast mode [ 87.856358][ T8245] bridge_slave_0: left promiscuous mode [ 87.862166][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.880132][ T8245] batman_adv: batadv0: Interface deactivated: macsec1 [ 87.889508][ T8245] batman_adv: batadv0: Removing interface: macsec1 [ 87.932325][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1897'. [ 87.986610][ T8264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.997091][ T8264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.040397][ T8264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.051041][ T8264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.125206][ T8264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.135814][ T8264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.200166][ T8288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.225151][ T8264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.235807][ T8264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.277261][ T8288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.284781][ T8288] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 88.299379][ T8288] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 88.320894][ T8264] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.329216][ T8264] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.356195][ T8264] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.364565][ T8264] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380854][ T8264] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.389667][ T8264] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.404438][ T8264] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.412826][ T8264] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472650][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 88.472669][ T29] audit: type=1326 audit(1746556730.382:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.502404][ T29] audit: type=1326 audit(1746556730.382:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.544424][ T29] audit: type=1326 audit(1746556730.382:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.568491][ T29] audit: type=1326 audit(1746556730.382:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.568523][ T29] audit: type=1326 audit(1746556730.382:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.568620][ T29] audit: type=1326 audit(1746556730.392:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.568650][ T29] audit: type=1400 audit(1746556730.402:8843): avc: denied { mount } for pid=8302 comm="syz.1.1921" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.568697][ T29] audit: type=1326 audit(1746556730.402:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8250 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f90831225 code=0x7ffc0000 [ 88.568791][ T29] audit: type=1400 audit(1746556730.402:8845): avc: denied { search } for pid=8302 comm="syz.1.1921" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.568820][ T29] audit: type=1400 audit(1746556730.402:8846): avc: denied { mounton } for pid=8302 comm="syz.1.1921" path="/408/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 88.980557][ T8327] infiniband syz!: set down [ 88.986065][ T8327] infiniband syz!: added team_slave_0 [ 89.017374][ T8327] RDS/IB: syz!: added [ 89.024917][ T8327] smc: adding ib device syz! with port count 1 [ 89.035087][ T8327] smc: ib device syz! port 1 has pnetid [ 89.056400][ T8347] dvmrp1: entered allmulticast mode [ 89.316328][ T8363] loop4: detected capacity change from 0 to 512 [ 89.327679][ T8363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 89.345916][ T8363] System zones: 1-12 [ 89.350674][ T8363] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.1948: corrupted xattr block 255: invalid header [ 89.366262][ T8363] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 89.375713][ T8363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.390039][ T8363] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.1948: corrupted xattr block 255: invalid header [ 89.406205][ T8363] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 89.414915][ T8363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.495229][ T8368] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.543322][ T8370] batadv_slave_1: entered promiscuous mode [ 89.550179][ T8370] veth1_virt_wifi: entered promiscuous mode [ 89.557839][ T8369] veth1_virt_wifi: left promiscuous mode [ 89.564081][ T8369] batadv_slave_1: left promiscuous mode [ 89.901928][ T8400] __nla_validate_parse: 1 callbacks suppressed [ 89.902030][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 90.014788][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 90.031395][ T8406] bond1: entered promiscuous mode [ 90.036504][ T8406] bond1: entered allmulticast mode [ 90.043684][ T8406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.134185][ T8415] loop2: detected capacity change from 0 to 512 [ 90.142884][ T8415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.200455][ T8415] EXT4-fs (loop2): 1 truncate cleaned up [ 90.208247][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.270994][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.355529][ T8432] netlink: 'syz.1.1978': attribute type 13 has an invalid length. [ 90.575952][ T8432] hsr0: left promiscuous mode [ 90.680779][ T8432] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.690316][ T8432] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.699392][ T8432] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.708703][ T8432] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.734131][ T8432] batman_adv: batadv0: Interface deactivated: macsec1 [ 91.190789][ T8460] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1987'. [ 91.737610][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.746764][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.773932][ T8488] xt_hashlimit: max too large, truncated to 1048576 [ 91.800029][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.815113][ T8488] Cannot find add_set index 0 as target [ 91.833899][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.842933][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.871469][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 91.954023][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'. [ 92.012540][ T8505] netlink: 'syz.4.2010': attribute type 30 has an invalid length. [ 92.136421][ T8513] loop8: detected capacity change from 0 to 128 [ 92.169735][ T8513] EXT4-fs: Ignoring removed nobh option [ 92.199976][ T8513] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.277025][ T8538] batadv1: entered promiscuous mode [ 92.327338][ T8544] loop1: detected capacity change from 0 to 512 [ 92.354491][ T8544] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.424228][ T8555] ip6tnl1: entered promiscuous mode [ 92.491795][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 92.646210][ T8588] loop2: detected capacity change from 0 to 512 [ 92.665591][ T8590] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.705825][ T8588] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.731585][ T8588] EXT4-fs (loop2): mount failed [ 92.895939][ T8633] 9pnet_fd: Insufficient options for proto=fd [ 93.007924][ T8651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.010321][ T8653] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.262807][ T8677] infiniband syz2: set active [ 93.267636][ T8677] infiniband syz2: added veth0_to_bond [ 93.278872][ T8681] IPVS: Error joining to the multicast group [ 93.279515][ T8677] RDS/IB: syz2: added [ 93.293338][ T8677] smc: adding ib device syz2 with port count 1 [ 93.299823][ T8677] smc: ib device syz2 port 1 has pnetid [ 93.467001][ T8690] loop1: detected capacity change from 0 to 512 [ 93.484054][ T8690] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.533543][ T8690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.623189][ T8690] EXT4-fs (loop1): 1 truncate cleaned up [ 93.680963][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 93.680979][ T29] audit: type=1326 audit(1746556735.582:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.742966][ T29] audit: type=1326 audit(1746556735.622:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.766745][ T29] audit: type=1326 audit(1746556735.622:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.791676][ T29] audit: type=1326 audit(1746556735.622:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.815961][ T29] audit: type=1326 audit(1746556735.632:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.839931][ T29] audit: type=1326 audit(1746556735.632:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bde7be969 code=0x7ffc0000 [ 93.863598][ T29] audit: type=1326 audit(1746556735.632:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bde7b5927 code=0x7ffc0000 [ 93.887090][ T29] audit: type=1326 audit(1746556735.632:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bde75ab39 code=0x7ffc0000 [ 93.911282][ T29] audit: type=1326 audit(1746556735.632:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bde7b5927 code=0x7ffc0000 [ 93.935173][ T29] audit: type=1326 audit(1746556735.632:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bde75ab39 code=0x7ffc0000 [ 94.405725][ T8736] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.484183][ T8742] netlink: 'syz.1.2115': attribute type 4 has an invalid length. [ 94.535436][ T8744] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 94.913226][ T8773] loop1: detected capacity change from 0 to 1024 [ 94.943970][ T8773] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2130: Allocating blocks 385-513 which overlap fs metadata [ 94.962282][ T8773] EXT4-fs (loop1): pa ffff8881069b82a0: logic 16, phys. 129, len 24 [ 94.970430][ T8773] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 95.015202][ T8790] loop4: detected capacity change from 0 to 512 [ 95.033660][ T8790] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.268407][ T8811] __nla_validate_parse: 7 callbacks suppressed [ 95.268428][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 95.532339][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.548078][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.634392][ T8848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.646526][ T8848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.659684][ T8848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674101][ T8848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.692825][ T8848] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.742796][ T8848] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.794257][ T8848] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.842706][ T8848] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.172829][ T8869] loop4: detected capacity change from 0 to 128 [ 96.584542][ T8902] loop1: detected capacity change from 0 to 256 [ 96.598449][ T8901] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 96.608948][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2187'. [ 96.858122][ T8927] SELinux: ebitmap: empty map [ 96.863142][ T8925] loop8: detected capacity change from 0 to 512 [ 96.870079][ T8927] SELinux: failed to load policy [ 96.875557][ T8925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.891655][ T8925] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 96.927247][ T8925] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 96.941604][ T8930] netlink: 'syz.1.2199': attribute type 3 has an invalid length. [ 96.953245][ T8925] EXT4-fs (loop8): 1 truncate cleaned up [ 97.215836][ T8951] loop1: detected capacity change from 0 to 1024 [ 97.272387][ T8957] netlink: 'syz.4.2209': attribute type 3 has an invalid length. [ 97.301581][ T8957] netlink: 'syz.4.2209': attribute type 3 has an invalid length. [ 97.316781][ T8962] rdma_op ffff88811c7a9980 conn xmit_rdma 0000000000000000 [ 97.497413][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2217'. [ 97.506564][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 97.583454][ T8983] loop4: detected capacity change from 0 to 128 [ 97.696972][ T8998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8998 comm=syz.6.2228 [ 97.717161][ T9001] veth0_macvtap: left promiscuous mode [ 97.739434][ T9001] macvtap0: refused to change device tx_queue_len [ 97.750570][ T9007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9007 comm=syz.4.2231 [ 97.784499][ T9011] netlink: 'syz.6.2234': attribute type 3 has an invalid length. [ 97.830567][ T9019] loop8: detected capacity change from 0 to 256 [ 97.843506][ T9020] netem: incorrect ge model size [ 97.848626][ T9020] netem: change failed [ 97.868227][ T9019] bio_check_eod: 102 callbacks suppressed [ 97.868277][ T9019] syz.8.2239: attempt to access beyond end of device [ 97.868277][ T9019] loop8: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 97.975545][ T9033] loop4: detected capacity change from 0 to 1024 [ 97.992013][ T9033] EXT4-fs: Ignoring removed orlov option [ 97.997782][ T9033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.006512][ T9035] loop1: detected capacity change from 0 to 1024 [ 98.024944][ T9035] EXT4-fs: Ignoring removed orlov option [ 98.037358][ T9035] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.058775][ T9033] random: crng reseeded on system resumption [ 98.406639][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2254'. [ 98.683146][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 98.683164][ T29] audit: type=1326 audit(1746556996.593:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.749646][ T29] audit: type=1326 audit(1746556996.613:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.773533][ T29] audit: type=1326 audit(1746556996.613:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.798521][ T29] audit: type=1326 audit(1746556996.613:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.822396][ T29] audit: type=1326 audit(1746556996.613:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.846672][ T29] audit: type=1326 audit(1746556996.613:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.870170][ T29] audit: type=1326 audit(1746556996.613:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.893712][ T29] audit: type=1326 audit(1746556996.613:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.917316][ T29] audit: type=1326 audit(1746556996.613:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 98.940767][ T29] audit: type=1326 audit(1746556996.623:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42dfa51225 code=0x7ffc0000 [ 99.105154][ T9096] loop8: detected capacity change from 0 to 164 [ 99.112617][ T9096] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.124218][ T9096] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.134461][ T9096] rock: directory entry would overflow storage [ 99.140674][ T9096] rock: sig=0x4f50, size=4, remaining=3 [ 99.141397][ T9098] loop1: detected capacity change from 0 to 1024 [ 99.146291][ T9096] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.181739][ T9098] EXT4-fs: Ignoring removed oldalloc option [ 99.188027][ T9098] EXT4-fs: Ignoring removed i_version option [ 99.205298][ T9098] EXT4-fs mount: 18 callbacks suppressed [ 99.205358][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.245149][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.253127][ T9100] unsupported nla_type 52263 [ 99.420261][ T9136] Driver unsupported XDP return value 0 on prog (id 1707) dev N/A, expect packet loss! [ 99.439130][ T8848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.484288][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2290'. [ 99.516272][ T8848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.537238][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 99.540611][ T8848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.558811][ T8848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.604342][ T9145] bond3: entered promiscuous mode [ 99.609478][ T9145] bond3: entered allmulticast mode [ 99.626281][ T9153] syz.8.2294: attempt to access beyond end of device [ 99.626281][ T9153] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.643029][ T9145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.791345][ T9170] netlink: 'syz.2.2300': attribute type 13 has an invalid length. [ 99.837911][ T9172] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2301'. [ 99.885237][ T9176] loop1: detected capacity change from 0 to 512 [ 99.897866][ T9176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.076564][ T9170] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.085922][ T9170] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.094904][ T9170] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.103608][ T9170] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.114708][ T9176] EXT4-fs (loop1): 1 truncate cleaned up [ 100.127025][ T9176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.225720][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.483690][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 100.555184][ T9214] loop1: detected capacity change from 0 to 1024 [ 100.563939][ T9214] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.574964][ T9214] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.587818][ T9214] JBD2: no valid journal superblock found [ 100.593687][ T9214] EXT4-fs (loop1): Could not load journal inode [ 100.847463][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 101.012782][ T9247] loop8: detected capacity change from 0 to 512 [ 101.030363][ T9247] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.039757][ T9247] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 101.055774][ T9247] EXT4-fs (loop8): orphan cleanup on readonly fs [ 101.065393][ T9247] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2333: bad orphan inode 15 [ 101.087856][ T9247] ext4_test_bit(bit=14, block=18) = 1 [ 101.093381][ T9247] is_bad_inode(inode)=0 [ 101.097606][ T9247] NEXT_ORPHAN(inode)=1023 [ 101.102064][ T9247] max_ino=32 [ 101.105301][ T9247] i_nlink=0 [ 101.109184][ T9247] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.2333: corrupted xattr block 19: e_value size too large [ 101.109388][ T9257] netlink: 'syz.6.2338': attribute type 13 has an invalid length. [ 101.134783][ T9247] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117) [ 101.144473][ T9247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.182151][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.351276][ T9257] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.360228][ T9257] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.369340][ T9257] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.378484][ T9257] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.403181][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 101.435004][ T9257] batman_adv: batadv0: Interface deactivated: macsec1 [ 101.456913][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 101.696012][ T9299] xt_hashlimit: max too large, truncated to 1048576 [ 101.704983][ T9299] Cannot find add_set index 0 as target [ 101.712778][ T9297] loop1: detected capacity change from 0 to 128 [ 101.719440][ T9297] EXT4-fs: Ignoring removed nobh option [ 101.751569][ T9297] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.786764][ T9297] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.837749][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 101.867576][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.906712][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 101.977296][ T9323] netlink: 'syz.8.2365': attribute type 13 has an invalid length. [ 101.977314][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 101.994239][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 102.005042][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 102.177275][ T9325] loop4: detected capacity change from 0 to 8192 [ 102.240669][ T9325] VFS: Lookup of 'file0' in vfat loop4 would have caused loop [ 102.390728][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.403383][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.521277][ T9323] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.530411][ T9323] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.539564][ T9323] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.548665][ T9323] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.586915][ T9344] ÿÿÿÿÿÿ: renamed from vlan1 [ 102.598946][ T9351] syz2: Port: 1 Link DOWN [ 102.682941][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 102.849059][ T9383] 9pnet_fd: Insufficient options for proto=fd [ 102.930770][ T9393] netlink: 'syz.4.2390': attribute type 13 has an invalid length. [ 102.960190][ T9397] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.141040][ T9393] hsr0: left promiscuous mode [ 103.200885][ T9393] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.209418][ T9393] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.217988][ T9393] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.226598][ T9393] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.246871][ T9393] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.255416][ T9393] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.263828][ T9393] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.272278][ T9393] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.021436][ T9387] syz.1.2387 (9387) used greatest stack depth: 6192 bytes left [ 106.471817][ T9411] __nla_validate_parse: 1 callbacks suppressed [ 106.471840][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 106.486984][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 106.497734][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 106.528640][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 106.528659][ T29] audit: type=1400 audit(1746557004.433:9673): avc: denied { connect } for pid=9416 comm="syz.8.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.584837][ T9425] ÿÿÿÿÿÿ: renamed from vlan1 [ 106.594216][ T9423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.604186][ T29] audit: type=1400 audit(1746557004.513:9674): avc: denied { mount } for pid=9426 comm="syz.6.2405" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.656916][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 106.670510][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2410'. [ 106.703492][ T9439] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 106.791356][ T29] audit: type=1400 audit(1746557004.703:9675): avc: denied { mount } for pid=9450 comm="syz.1.2421" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.822845][ T9453] loop8: detected capacity change from 0 to 512 [ 106.841116][ T29] audit: type=1400 audit(1746557004.733:9676): avc: denied { unmount } for pid=9450 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.861135][ T29] audit: type=1326 audit(1746557004.743:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 106.884799][ T29] audit: type=1326 audit(1746557004.743:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 106.917895][ T29] audit: type=1326 audit(1746557004.823:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 106.941689][ T29] audit: type=1326 audit(1746557004.823:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 106.967255][ T29] audit: type=1326 audit(1746557004.873:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 107.146240][ T29] audit: type=1326 audit(1746557004.873:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 107.192472][ T9453] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2419: bg 0: block 248: padding at end of block bitmap is not set [ 107.230669][ T9453] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.2419: Failed to acquire dquot type 1 [ 107.243399][ T9453] EXT4-fs (loop8): 1 truncate cleaned up [ 107.249744][ T9453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.262952][ T9453] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.343401][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.350876][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.358477][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.366024][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.373750][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.381328][ T23] hid-generic 0021:0009:0000.0003: unknown main item tag 0x0 [ 107.395307][ T23] hid-generic 0021:0009:0000.0003: hidraw0: HID v0.07 Device [syz0] on syz1 [ 107.521928][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.746396][ T9518] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.840557][ T9523] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 107.883345][ T9539] netlink: 'syz.6.2457': attribute type 3 has an invalid length. [ 107.922939][ T9542] hub 9-0:1.0: USB hub found [ 107.927845][ T9542] hub 9-0:1.0: 8 ports detected [ 108.009607][ T9553] loop8: detected capacity change from 0 to 128 [ 108.035657][ T9553] syz.8.2463: attempt to access beyond end of device [ 108.035657][ T9553] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 108.062781][ T6986] kworker/u8:25: attempt to access beyond end of device [ 108.062781][ T6986] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 108.089876][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2465'. [ 108.172952][ T9563] loop8: detected capacity change from 0 to 2048 [ 108.179723][ T9563] EXT4-fs: inline encryption not supported [ 108.195627][ T9563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.211562][ T9563] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.2468: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 108.231080][ T9563] EXT4-fs (loop8): Remounting filesystem read-only [ 108.253640][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.347432][ T9578] SELinux: ebitmap: truncated map [ 108.366337][ T9578] SELinux: failed to load policy [ 108.412872][ T9588] program syz.2.2479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.431402][ T9590] netlink: 'syz.8.2480': attribute type 10 has an invalid length. [ 108.439667][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2480'. [ 108.449460][ T9590] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.458294][ T9590] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.467207][ T9590] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.476038][ T9590] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.486579][ T9590] team0: Port device geneve1 added [ 108.579958][ T9608] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.823347][ T9651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9651 comm=gtp [ 108.835334][ T9651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9651 comm=gtp [ 108.893038][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 108.905575][ T9664] loop2: detected capacity change from 0 to 512 [ 108.914181][ T9661] loop8: detected capacity change from 0 to 128 [ 108.923607][ T9661] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.926351][ T9665] tipc: Started in network mode [ 108.940371][ T9665] tipc: Node identity ac14140f, cluster identity 4711 [ 108.947726][ T9665] tipc: New replicast peer: 255.255.255.255 [ 108.954137][ T9665] tipc: Enabled bearer , priority 10 [ 108.955572][ T9661] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.971417][ T9664] EXT4-fs (loop2): 1 orphan inode deleted [ 108.977674][ T9664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.990475][ T9664] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.001513][ T7023] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1 [ 109.030128][ T7023] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.030459][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.083593][ T9677] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2520'. [ 109.119688][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2522'. [ 109.513295][ T9715] loop4: detected capacity change from 0 to 256 [ 109.559236][ T9715] syz.4.2535: attempt to access beyond end of device [ 109.559236][ T9715] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 109.618100][ T9720] loop1: detected capacity change from 0 to 512 [ 109.633819][ T9720] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 109.658759][ T9720] EXT4-fs (loop1): invalid journal inode [ 109.684829][ T9720] EXT4-fs (loop1): can't get journal size [ 109.747803][ T9720] EXT4-fs (loop1): 1 truncate cleaned up [ 109.760251][ T9720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.829822][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.961259][ T23] tipc: Node number set to 2886997007 [ 110.081912][ T9757] macvtap0: refused to change device tx_queue_len [ 110.158767][ T9768] rdma_op ffff88811091d580 conn xmit_rdma 0000000000000000 [ 110.206970][ T9774] batadv1: entered promiscuous mode [ 110.379631][ T9797] loop8: detected capacity change from 0 to 512 [ 110.413523][ T9797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.428769][ T9797] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.511222][ T9797] loop8: detected capacity change from 512 to 0 [ 110.518042][ T9806] syz.8.2572: attempt to access beyond end of device [ 110.518042][ T9806] loop8: rw=12288, sector=76, nr_sectors = 4 limit=0 [ 110.531476][ T9806] EXT4-fs error (device loop8): ext4_write_dquot:6915: comm syz.8.2572: Failed to commit dquot type 1 [ 110.542625][ T9806] syz.8.2572: attempt to access beyond end of device [ 110.542625][ T9806] loop8: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 110.556072][ T9806] buffer_io_error: 6 callbacks suppressed [ 110.556144][ T9806] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 110.570727][ T9806] EXT4-fs (loop8): I/O error while writing superblock [ 110.598284][ T7364] syz-executor: attempt to access beyond end of device [ 110.598284][ T7364] loop8: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 110.651719][ T57] kworker/u8:4: attempt to access beyond end of device [ 110.651719][ T57] loop8: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 110.676090][ T57] kworker/u8:4: attempt to access beyond end of device [ 110.676090][ T57] loop8: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 110.701549][ T57] kworker/u8:4: attempt to access beyond end of device [ 110.701549][ T57] loop8: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 110.716404][ T57] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4573: inode #18: block 35: comm kworker/u8:4: unable to read itable block [ 110.733319][ T57] kworker/u8:4: attempt to access beyond end of device [ 110.733319][ T57] loop8: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 110.747059][ T57] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 110.758328][ T9815] loop4: detected capacity change from 0 to 512 [ 110.767004][ T9815] EXT4-fs: Ignoring removed oldalloc option [ 110.773774][ T57] EXT4-fs (loop8): I/O error while writing superblock [ 110.781397][ T9815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0182] [ 110.785067][ T7364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.789356][ T9815] System zones: 1-12 [ 110.801501][ T7364] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 110.811806][ T9815] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2580: Parent and EA inode have the same ino 15 [ 110.813955][ T7364] EXT4-fs (loop8): I/O error while writing superblock [ 110.826809][ T9815] EXT4-fs (loop4): Remounting filesystem read-only [ 110.837908][ T9815] EXT4-fs (loop4): 1 orphan inode deleted [ 110.839525][ T9800] Buffer I/O error on dev loop8, logical block 12, lost sync page write [ 110.844474][ T9815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.865253][ T9815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.931632][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.003881][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.042029][ T9825] batadv1: entered promiscuous mode [ 111.077812][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.146806][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.306343][ T57] team0: Port device geneve1 removed [ 111.328289][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.342767][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.356268][ T57] bond0 (unregistering): Released all slaves [ 111.374024][ T9861] syz_tun: entered allmulticast mode [ 111.382996][ T9859] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 111.391570][ T9861] dvmrp1: left allmulticast mode [ 111.461502][ T9860] syz_tun: left allmulticast mode [ 111.534428][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 111.534445][ T29] audit: type=1326 audit(1746557009.443:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.564801][ T29] audit: type=1326 audit(1746557009.443:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.588569][ T29] audit: type=1326 audit(1746557009.443:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.612146][ T29] audit: type=1326 audit(1746557009.443:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.784153][ T29] audit: type=1326 audit(1746557009.443:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.807920][ T29] audit: type=1326 audit(1746557009.443:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.831550][ T29] audit: type=1326 audit(1746557009.443:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.855261][ T29] audit: type=1326 audit(1746557009.563:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.878750][ T29] audit: type=1326 audit(1746557009.603:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.878796][ T9886] loop1: detected capacity change from 0 to 2048 [ 111.902283][ T29] audit: type=1326 audit(1746557009.603:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f907fe969 code=0x7ffc0000 [ 111.963045][ T9886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.975239][ T57] hsr_slave_0: left promiscuous mode [ 111.984892][ T57] hsr_slave_1: left promiscuous mode [ 111.993130][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.010082][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.034878][ T9886] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.105837][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.120197][ T57] team0 (unregistering): Port device team_slave_1 removed [ 112.133531][ T57] team0 (unregistering): Port device team_slave_0 removed [ 112.151480][ T7023] smc: removing ib device syz2 [ 112.235365][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 112.330375][ T9901] syzkaller1: entered promiscuous mode [ 112.336078][ T9901] syzkaller1: entered allmulticast mode [ 112.449942][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.457270][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.464831][ T9826] bridge_slave_0: entered allmulticast mode [ 112.471493][ T9826] bridge_slave_0: entered promiscuous mode [ 112.478846][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.486086][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.494160][ T9826] bridge_slave_1: entered allmulticast mode [ 112.500838][ T9826] bridge_slave_1: entered promiscuous mode [ 112.533368][ T9932] loop2: detected capacity change from 0 to 2048 [ 112.552959][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.569818][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.584535][ T9932] loop2: p1 < > p4 [ 112.589233][ T9932] loop2: p4 size 8388608 extends beyond EOD, truncated [ 112.642140][ T9826] team0: Port device team_slave_0 added [ 112.654157][ T9826] team0: Port device team_slave_1 added [ 112.674907][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.682008][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.708175][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.767714][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.774926][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.801653][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.873061][ T9826] hsr_slave_0: entered promiscuous mode [ 112.883622][ T9826] hsr_slave_1: entered promiscuous mode [ 112.889763][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.899647][ T9826] Cannot create hsr debugfs directory [ 112.948918][ T9976] __nla_validate_parse: 4 callbacks suppressed [ 112.948939][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2645'. [ 112.961726][ T9972] SELinux: ebitmap: truncated map [ 112.964310][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2645'. [ 112.975841][ T9972] SELinux: failed to load policy [ 113.323193][T10027] loop2: detected capacity change from 0 to 256 [ 113.399459][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 113.410403][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 113.449294][ T9826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.463597][ T9826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 113.479301][ T9826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 113.488911][ T9826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 113.547812][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.564274][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.586098][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.593237][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.615458][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.622901][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.785991][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.976846][T10087] SELinux: failed to load policy [ 114.000099][ T9826] veth0_vlan: entered promiscuous mode [ 114.021113][ T9826] veth1_vlan: entered promiscuous mode [ 114.054449][ T9826] veth0_macvtap: entered promiscuous mode [ 114.075351][ T9826] veth1_macvtap: entered promiscuous mode [ 114.102791][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.139527][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.167560][ T9826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.176435][ T9826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.185263][ T9826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.194102][ T9826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.218168][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 114.250294][T10105] 9pnet: p9_errstr2errno: server reported unknown error í HID v0.07 Device [syz0] on syz1 [ 114.690882][T10151] atomic_op ffff88811091f928 conn xmit_atomic 0000000000000000 [ 114.829118][T10159] infiniband syz2: set down [ 114.833748][T10159] infiniband syz2: added veth0_to_bond [ 114.870164][T10159] RDS/IB: syz2: added [ 114.881137][T10159] smc: adding ib device syz2 with port count 1 [ 114.887514][T10159] smc: ib device syz2 port 1 has pnetid [ 114.958271][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2722'. [ 115.318387][T10204] veth0_to_bond: entered allmulticast mode [ 115.328735][T10201] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 115.329157][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 115.351461][T10204] veth0_to_bond (unregistering): left allmulticast mode [ 115.386152][T10212] ip6t_rpfilter: unknown options [ 115.425351][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'. [ 115.829126][T10275] loop4: detected capacity change from 0 to 164 [ 115.855240][T10275] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.872285][T10275] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.891562][T10275] rock: directory entry would overflow storage [ 115.897818][T10275] rock: sig=0x4f50, size=4, remaining=3 [ 115.903572][T10275] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.918353][T10279] loop8: detected capacity change from 0 to 2048 [ 115.992901][T10279] loop8: p1 < > p4 [ 115.997463][T10279] loop8: p4 size 8388608 extends beyond EOD, truncated [ 116.008036][T10291] macvtap0: refused to change device tx_queue_len [ 116.212011][T10306] loop2: detected capacity change from 0 to 1024 [ 116.221602][T10306] EXT4-fs: Ignoring removed nobh option [ 116.227384][T10306] EXT4-fs: Ignoring removed bh option [ 116.275643][T10312] veth0_macvtap: left promiscuous mode [ 116.285419][T10306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.308464][T10312] macvtap0: refused to change device tx_queue_len [ 116.349636][T10306] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2786: error while reading EA inode 32 err=-116 [ 116.368902][T10306] EXT4-fs (loop2): Remounting filesystem read-only [ 116.379804][T10306] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.2.2786: cleanup dec ref error -30 [ 116.393158][T10306] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #18: comm syz.2.2786: dec ref error=-30 [ 116.415870][T10326] loop4: detected capacity change from 0 to 2048 [ 116.433891][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.482147][T10326] loop4: p1 < > p4 [ 116.487246][T10326] loop4: p4 size 8388608 extends beyond EOD, truncated [ 116.623670][T10358] loop4: detected capacity change from 0 to 164 [ 116.630029][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 116.630044][ T29] audit: type=1326 audit(1746557014.533:10112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.646815][T10364] loop8: detected capacity change from 0 to 512 [ 116.660105][ T29] audit: type=1326 audit(1746557014.533:10113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.673626][T10364] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 116.690261][ T29] audit: type=1326 audit(1746557014.533:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.690293][ T29] audit: type=1326 audit(1746557014.533:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.733375][T10364] EXT4-fs (loop8): invalid journal inode [ 116.747075][ T29] audit: type=1326 audit(1746557014.533:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.764683][T10358] bio_check_eod: 2 callbacks suppressed [ 116.764703][T10358] syz.4.2808: attempt to access beyond end of device [ 116.764703][T10358] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.776563][ T29] audit: type=1326 audit(1746557014.533:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.776600][ T29] audit: type=1326 audit(1746557014.533:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.776653][ T29] audit: type=1326 audit(1746557014.533:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.784111][T10364] EXT4-fs (loop8): can't get journal size [ 116.796293][ T29] audit: type=1326 audit(1746557014.533:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.796331][ T29] audit: type=1326 audit(1746557014.533:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15f925e969 code=0x7ffc0000 [ 116.829084][T10358] syz.4.2808: attempt to access beyond end of device [ 116.829084][T10358] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.953146][T10364] EXT4-fs (loop8): 1 truncate cleaned up [ 116.959334][T10364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.060330][ T9826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.133282][T10392] syz_tun: entered allmulticast mode [ 117.142014][T10390] syz_tun: left allmulticast mode [ 117.147294][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2824'. [ 117.156268][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2824'. [ 117.262396][T10414] tipc: Started in network mode [ 117.267388][T10414] tipc: Node identity ac1414aa, cluster identity 4711 [ 117.302660][T10414] tipc: Enabled bearer , priority 10 [ 117.309605][T10420] 9pnet: p9_errstr2errno: server reported unknown error í [ 117.612121][T10463] pim6reg1: entered promiscuous mode [ 117.617595][T10463] pim6reg1: entered allmulticast mode [ 117.644373][T10465] Unknown options in mask 5 [ 117.836718][T10481] netlink: 'syz.1.2863': attribute type 10 has an invalid length. [ 117.861079][T10481] ipvlan0: entered allmulticast mode [ 117.866524][T10481] veth0_vlan: entered allmulticast mode [ 117.917941][T10481] team0: Device ipvlan0 failed to register rx_handler [ 117.937720][T10487] loop8: detected capacity change from 0 to 512 [ 117.947024][T10487] EXT4-fs: Ignoring removed orlov option [ 117.963319][T10487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.989152][T10487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.022763][T10487] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.111106][ T9826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.198156][T10500] veth0_to_bond: entered allmulticast mode [ 118.221464][T10500] __nla_validate_parse: 11 callbacks suppressed [ 118.221484][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 118.251848][T10500] veth0_to_bond (unregistering): left allmulticast mode [ 118.361459][T10514] netlink: 197276 bytes leftover after parsing attributes in process `syz.8.2878'. [ 118.481925][T10522] loop2: detected capacity change from 0 to 128 [ 118.493749][T10522] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.507158][T10522] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.516937][T10525] netlink: 'syz.6.2882': attribute type 4 has an invalid length. [ 118.529742][T10525] netlink: 'syz.6.2882': attribute type 4 has an invalid length. [ 118.559655][ T6986] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.613051][T10536] loop8: detected capacity change from 0 to 1024 [ 118.620403][T10536] EXT4-fs: Ignoring removed i_version option [ 118.626869][T10536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.675067][T10536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.703525][ T9826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.748745][T10552] veth0_to_bond: entered allmulticast mode [ 118.771803][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2895'. [ 118.809013][T10552] veth0_to_bond (unregistering): left allmulticast mode [ 118.838320][T10558] loop2: detected capacity change from 0 to 1024 [ 118.845557][T10558] EXT4-fs: Ignoring removed i_version option [ 118.851741][T10558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.881695][T10558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.908075][ T7023] smc: removing ib device syz2 [ 118.933868][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.202379][T10575] loop4: detected capacity change from 0 to 128 [ 119.227556][T10575] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.242814][T10575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.260157][T10577] loop2: detected capacity change from 0 to 512 [ 119.306055][ T7023] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.373225][T10577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2902: bg 0: block 248: padding at end of block bitmap is not set [ 119.391578][T10577] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2902: Failed to acquire dquot type 1 [ 119.433433][T10577] EXT4-fs (loop2): 1 truncate cleaned up [ 119.447601][T10577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.460723][T10577] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.480765][T10609] tipc: Enabling of bearer rejected, already enabled [ 119.507025][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.521919][T10609] tipc: Disabling bearer [ 119.697935][T10637] loop4: detected capacity change from 0 to 512 [ 119.731100][T10637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2933: bg 0: block 248: padding at end of block bitmap is not set [ 119.756407][T10637] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2933: Failed to acquire dquot type 1 [ 119.779527][T10637] EXT4-fs (loop4): 1 truncate cleaned up [ 119.786177][T10637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.799307][T10637] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.860974][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.907689][T10657] pim6reg1: entered promiscuous mode [ 119.913261][T10657] pim6reg1: entered allmulticast mode [ 119.978590][T10668] x_tables: duplicate underflow at hook 1 [ 120.516661][T10710] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.560178][T10714] loop2: detected capacity change from 0 to 2048 [ 120.593839][T10710] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.632708][T10714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.678725][T10710] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.699568][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.749252][T10710] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.771822][T10734] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2975'. [ 120.832447][T10710] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.853792][T10710] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.868518][T10710] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.880303][T10710] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.000497][T10754] netlink: 'syz.8.2983': attribute type 6 has an invalid length. [ 121.082582][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.090073][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.097628][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.105250][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.112725][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.120367][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.127921][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.135399][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.142924][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.150484][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.158159][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.165847][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.173656][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.181157][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.189076][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.196615][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.204325][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.211818][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.219930][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.227684][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.231074][T10775] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 121.235248][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.249768][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.257245][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.264677][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.272362][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.279868][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.287332][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.294876][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.302453][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.309880][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.317337][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.325012][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.335037][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 121.352207][T10778] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 121.404134][T10786] netlink: 'syz.4.3000': attribute type 21 has an invalid length. [ 121.412631][T10786] netlink: 'syz.4.3000': attribute type 20 has an invalid length. [ 121.420821][T10786] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.460174][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3004'. [ 121.499041][T10798] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 121.620685][T10821] loop4: detected capacity change from 0 to 512 [ 121.652542][T10830] loop2: detected capacity change from 0 to 512 [ 121.665476][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 121.665497][ T29] audit: type=1400 audit(1746557019.563:10375): avc: denied { getopt } for pid=10831 comm="syz.1.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 121.692210][T10830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.713567][T10830] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 121.721595][T10830] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 121.742897][T10821] EXT4-fs (loop4): 1 orphan inode deleted [ 121.749226][T10821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.763587][ T7023] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.773438][ T7023] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1 [ 121.781123][T10830] System zones: 0-1, 15-15, 18-18, 34-34 [ 121.797416][T10830] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.804122][T10830] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 121.814253][T10830] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 121.821525][T10821] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.828975][T10830] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 121.846427][ T29] audit: type=1400 audit(1746557019.723:10376): avc: denied { setopt } for pid=10850 comm="syz.6.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.868601][T10830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3017: bg 0: block 40: padding at end of block bitmap is not set [ 121.883362][ T29] audit: type=1400 audit(1746557019.773:10377): avc: denied { append } for pid=10820 comm="syz.4.3016" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.906156][T10830] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 121.915579][T10830] EXT4-fs (loop2): 1 truncate cleaned up [ 121.922277][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.923314][T10830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.992362][ T29] audit: type=1404 audit(1746557019.883:10378): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 122.007513][ T29] audit: type=1400 audit(1746557019.883:10379): avc: denied { map_create } for pid=10854 comm="syz.8.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.027043][ T29] audit: type=1400 audit(1746557019.883:10380): avc: denied { map_create } for pid=10858 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.046750][ T29] audit: type=1400 audit(1746557019.883:10381): avc: denied { prog_load } for pid=10854 comm="syz.8.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.066120][ T29] audit: type=1400 audit(1746557019.883:10382): avc: denied { prog_load } for pid=10858 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.315581][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 122.862827][T10919] ================================================================== [ 122.871021][T10919] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 122.879946][T10919] [ 122.882464][T10919] write to 0xffff8881012beca8 of 8 bytes by task 10913 on cpu 0: [ 122.890367][T10919] shmem_file_splice_read+0x444/0x5d0 [ 122.895866][T10919] splice_direct_to_actor+0x26c/0x680 [ 122.901258][T10919] do_splice_direct+0xda/0x150 [ 122.906253][T10919] do_sendfile+0x380/0x640 [ 122.910825][T10919] __x64_sys_sendfile64+0x105/0x150 [ 122.916052][T10919] x64_sys_call+0xb39/0x2fb0 [ 122.920681][T10919] do_syscall_64+0xd0/0x1a0 [ 122.925275][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.931299][T10919] [ 122.933683][T10919] write to 0xffff8881012beca8 of 8 bytes by task 10919 on cpu 1: [ 122.941541][T10919] shmem_file_splice_read+0x444/0x5d0 [ 122.946951][T10919] splice_direct_to_actor+0x26c/0x680 [ 122.952336][T10919] do_splice_direct+0xda/0x150 [ 122.957108][T10919] do_sendfile+0x380/0x640 [ 122.961582][T10919] __x64_sys_sendfile64+0x105/0x150 [ 122.966800][T10919] x64_sys_call+0xb39/0x2fb0 [ 122.971497][T10919] do_syscall_64+0xd0/0x1a0 [ 122.976015][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.981952][T10919] [ 122.984288][T10919] value changed: 0x0000000000002d56 -> 0x0000000000002d5a [ 122.992357][T10919] [ 122.994828][T10919] Reported by Kernel Concurrency Sanitizer on: [ 123.001131][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.1.3058 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 123.013835][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.024345][T10919] ================================================================== [ 123.431525][ T8641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.752980][ T7026] bond0 (unregistering): Released all slaves [ 123.763458][ T7026] bond1 (unregistering): Released all slaves [ 123.834025][ T7026] hsr_slave_0: left promiscuous mode [ 123.839881][ T7026] hsr_slave_1: left promiscuous mode [ 124.121396][ T7026] IPVS: stop unused estimator thread 0...