last executing test programs: 39.479168657s ago: executing program 4 (id=137): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x4}, 0x18) close(r0) 39.419456658s ago: executing program 4 (id=142): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x8000000000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) flistxattr(r2, 0x0, 0x0) 39.346421929s ago: executing program 4 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000000), 0x0) 39.30195255s ago: executing program 4 (id=152): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 38.3316001s ago: executing program 4 (id=179): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 36.924872958s ago: executing program 4 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 36.907582928s ago: executing program 32 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 34.277692951s ago: executing program 3 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) link(0x0, 0x0) 34.114814995s ago: executing program 3 (id=315): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 34.038301436s ago: executing program 3 (id=318): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 33.974252877s ago: executing program 3 (id=321): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 33.661434974s ago: executing program 3 (id=330): memfd_create(&(0x7f0000000000)='F\x1d\x1ax&|\x16\xee@c\xb0[\xdb\x90:\xdd\x8c\x11\xd5{\x1d\xbcF\xcf;\x1f\xd9\xd4\x8c\x84\'\xac\x86\x91&<\xd0\x1e5\x85>&sV', 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 33.306546631s ago: executing program 3 (id=334): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 33.256789962s ago: executing program 33 (id=334): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 24.539188877s ago: executing program 6 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 24.501514688s ago: executing program 6 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x5, 0x60000000, 0x0, 0x0, &(0x7f00000004c0)="16aeac4a80da0d14ca309fb28663489a573e3dddf61d544e92f6cc0385398ab9f67c84eb85be8f52586872a2a8eb9e4cbe7baa894133e0ce41c010", &(0x7f0000000000), 0x1}, 0xd) 24.440734999s ago: executing program 6 (id=601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 24.38815798s ago: executing program 6 (id=604): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)={[{@nouid32}, {@grpjquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x3, 0x56a, &(0x7f0000001900)="$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") open(&(0x7f0000000000)='./file1\x00', 0x46642, 0x21) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1284, 0x1, 0x2, 0x169}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 24.243386973s ago: executing program 6 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 23.547969737s ago: executing program 6 (id=632): unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 23.539615807s ago: executing program 34 (id=632): unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 13.494390229s ago: executing program 7 (id=1033): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x7fffffffffffffff, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 13.45090964s ago: executing program 7 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 13.412289061s ago: executing program 7 (id=1037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020600) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.370218191s ago: executing program 7 (id=1040): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1, 0x7, 0x14, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 13.300789173s ago: executing program 7 (id=1043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = io_uring_setup(0xdac, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) 13.028274469s ago: executing program 7 (id=1052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='cpu<02||!') 13.028025338s ago: executing program 35 (id=1052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='cpu<02||!') 2.567954319s ago: executing program 1 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000002000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.567320239s ago: executing program 1 (id=1477): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.201249566s ago: executing program 1 (id=1479): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 1.196400286s ago: executing program 1 (id=1525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) 1.147774267s ago: executing program 8 (id=1528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000fa8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) 1.147324477s ago: executing program 1 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) 1.107279008s ago: executing program 8 (id=1533): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r0, &(0x7f0000002ac0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1) 974.148421ms ago: executing program 8 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendto(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 123.802148ms ago: executing program 2 (id=1582): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x59, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 123.578157ms ago: executing program 0 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 123.436528ms ago: executing program 5 (id=1584): r0 = socket$inet(0x2, 0x3, 0x4) preadv2(0xffffffffffffffff, &(0x7f0000005540)=[{&(0x7f00000042c0)=""/4096, 0x1000}], 0x1, 0xc480, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 123.359928ms ago: executing program 0 (id=1585): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)='\r', 0x1, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 115.903598ms ago: executing program 5 (id=1586): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) set_tid_address(0x0) 108.433098ms ago: executing program 0 (id=1587): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x4000000, 0x3, 0x6}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) 55.967879ms ago: executing program 5 (id=1588): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) 55.762549ms ago: executing program 0 (id=1589): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 55.572809ms ago: executing program 5 (id=1590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000001000']) 14.84869ms ago: executing program 2 (id=1591): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 5 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): dit: type=1400 audit(1746995202.529:107): avc: denied { create } for pid=3484 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.714525][ T3481] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 31.725974][ T3481] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11: invalid indirect mapped block 3 (level 2) [ 31.747179][ T3481] EXT4-fs (loop4): 2 truncates cleaned up [ 31.756333][ T3481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.791006][ T3491] loop0: detected capacity change from 0 to 2048 [ 31.837831][ T3500] loop3: detected capacity change from 0 to 512 [ 31.844636][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.869726][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.888929][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.962354][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.000001][ T3500] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.007361][ T3510] smc: net device bond0 applied user defined pnetid SYZ0 [ 32.033839][ T3510] smc: net device bond0 erased user defined pnetid SYZ0 [ 32.146539][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 32.158881][ T3533] veth1_macvtap: left promiscuous mode [ 32.160238][ T3531] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 32.192963][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.270661][ T3541] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 32.283856][ T3542] loop3: detected capacity change from 0 to 1024 [ 32.298422][ T3542] EXT4-fs: Ignoring removed nobh option [ 32.304131][ T3542] EXT4-fs: Ignoring removed nobh option [ 32.310900][ T3542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 32.327379][ T3542] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.35: inode #4294967295: comm syz.3.35: iget: illegal inode # [ 32.358943][ T3542] EXT4-fs (loop3): no journal found [ 32.364288][ T3542] EXT4-fs (loop3): can't get journal size [ 32.382027][ T3550] Illegal XDP return value 31 on prog (id 20) dev syz_tun, expect packet loss! [ 32.391293][ T3542] EXT4-fs (loop3): failed to initialize system zone (-22) [ 32.399233][ T3542] EXT4-fs (loop3): mount failed [ 32.503031][ T3563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 32.530034][ T3564] netlink: 'syz.4.45': attribute type 4 has an invalid length. [ 32.569388][ T3564] netlink: 'syz.4.45': attribute type 4 has an invalid length. [ 32.655990][ T3572] loop2: detected capacity change from 0 to 512 [ 32.689476][ T3572] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 32.712753][ C1] hrtimer: interrupt took 38166 ns [ 32.726371][ T3572] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 32.776524][ T3572] EXT4-fs (loop2): 1 truncate cleaned up [ 32.789967][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.881414][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.950666][ T3594] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.117963][ T3603] process 'syz.2.62' launched '/dev/fd/3' with NULL argv: empty string added [ 33.247612][ T3594] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.307961][ T3594] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.405756][ T3594] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.510753][ T3594] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.536290][ T3594] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.568768][ T3594] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.604992][ T3594] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.632151][ T3658] 9pnet_fd: Insufficient options for proto=fd [ 33.643154][ T3657] mmap: syz.1.85 (3657) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.694967][ T3660] loop3: detected capacity change from 0 to 164 [ 33.720511][ T3594] gtp (3594) used greatest stack depth: 10872 bytes left [ 33.732395][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 33.741163][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 33.757046][ T3660] rock: directory entry would overflow storage [ 33.763277][ T3660] rock: sig=0x4543, size=28, remaining=18 [ 34.057298][ T3708] loop2: detected capacity change from 0 to 128 [ 34.091624][ T3706] ALSA: seq fatal error: cannot create timer (-16) [ 34.128892][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.136849][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.144694][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.186084][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.193945][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.201727][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.209532][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.217321][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.225189][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.233002][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.240771][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.248544][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.256346][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.264179][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.278186][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.285985][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.293747][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.301487][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.309321][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.317081][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.324913][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.332795][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.340525][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.348362][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.356445][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.364284][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.372114][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.380081][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.387983][ T3393] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 34.400806][ T3393] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 34.470126][ T3734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.513891][ T3728] fido_id[3728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.530229][ T3734] netlink: 'syz.2.119': attribute type 28 has an invalid length. [ 34.652202][ T3747] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 34.967340][ T3792] Unknown options in mask 5 [ 35.034952][ T3807] loop4: detected capacity change from 0 to 128 [ 35.053884][ T3807] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.070380][ T3809] loop0: detected capacity change from 0 to 512 [ 35.090124][ T3807] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.107052][ T3809] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.128592][ T3809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 35.139192][ T3809] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.153: corrupted in-inode xattr: e_value size too large [ 35.166739][ T3809] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.153: couldn't read orphan inode 15 (err -117) [ 35.215151][ T3816] infiniband syz!: set active [ 35.219307][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.219860][ T3816] infiniband syz!: added team_slave_0 [ 35.264711][ T3816] RDS/IB: syz!: added [ 35.267349][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f200: rx timeout, send abort May 11 20:26:46 syzkaller kern.a[ 35.281006][ T3816] smc: adding ib device syz! with port count 1 lert kernel: [ [ 35.288120][ T3809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 35.267349][ [ 35.289042][ T3816] smc: ib device syz! port 1 has pnetid C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f200: rx timeout, send abort [ 35.594961][ T3816] syz.1.157 (3816) used greatest stack depth: 10648 bytes left [ 35.767387][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f600: rx timeout, send abort [ 35.776974][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f200: abort rx timeout. Force session deactivation May 11 20:26:46 syzkaller kern.alert kernel: [ 35.767387][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f600: rx timeout, send abort May 11 20:26:46 syzkaller kern.alert kernel: [ 35.776974][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f200: abort rx timeout. Force session deactivation [ 35.996354][ T3866] xt_hashlimit: max too large, truncated to 1048576 [ 36.027898][ T3321] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 36.035629][ T3321] FAT-fs (loop4): Filesystem has been set read-only [ 36.058043][ T3321] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 36.106816][ T3479] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.142846][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 36.142862][ T29] audit: type=1400 audit(1746995206.989:429): avc: denied { map_create } for pid=3872 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 36.170319][ T29] audit: type=1400 audit(1746995206.999:430): avc: denied { prog_load } for pid=3872 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 36.189351][ T29] audit: type=1400 audit(1746995206.999:431): avc: denied { create } for pid=3872 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 36.208612][ T29] audit: type=1400 audit(1746995207.009:432): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.271737][ T29] audit: type=1400 audit(1746995207.049:433): avc: denied { open } for pid=3874 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 36.275659][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f600: abort rx timeout. Force session deactivation [ 36.290843][ T29] audit: type=1400 audit(1746995207.099:434): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 May 11 20:26:47 [ 36.325396][ T29] audit: type=1400 audit(1746995207.169:435): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.alert kernel: [ 36.275659][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811962f600: abort rx timeout. Force session deactivation [ 36.360277][ T29] audit: type=1400 audit(1746995207.209:436): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.417122][ T29] audit: type=1400 audit(1746995207.239:437): avc: denied { map_create } for pid=3878 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 36.436236][ T29] audit: type=1400 audit(1746995207.239:438): avc: denied { prog_load } for pid=3878 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 36.521647][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 36.534066][ T3893] netlink: 'syz.2.192': attribute type 4 has an invalid length. [ 36.602042][ T3903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 36.840924][ T3950] ip6gre1: entered allmulticast mode [ 36.914613][ T3965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 37.208032][ T4020] netlink: 830 bytes leftover after parsing attributes in process `syz.3.253'. [ 37.370893][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.464649][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.534585][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.584327][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.691733][ T12] bridge_slave_1: left allmulticast mode [ 37.697541][ T12] bridge_slave_1: left promiscuous mode [ 37.703180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.724655][ T12] bridge_slave_0: left allmulticast mode [ 37.730406][ T12] bridge_slave_0: left promiscuous mode [ 37.736113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.865716][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.893051][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.920973][ T12] bond0 (unregistering): Released all slaves [ 38.015175][ T12] hsr_slave_0: left promiscuous mode [ 38.020768][ T12] hsr_slave_1: left promiscuous mode [ 38.032978][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.040442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.064535][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.072029][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.106426][ T12] veth1_macvtap: left promiscuous mode [ 38.111970][ T12] veth0_macvtap: left promiscuous mode [ 38.132826][ T12] veth1_vlan: left promiscuous mode [ 38.138073][ T12] veth0_vlan: left promiscuous mode [ 38.273502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 38.293477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 38.554688][ T4081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 38.732109][ T4109] xt_connbytes: Forcing CT accounting to be enabled [ 38.754205][ T4109] Cannot find set identified by id 0 to match [ 39.024945][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.063218][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.126431][ T4084] chnl_net:caif_netlink_parms(): no params data found [ 39.224273][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.231452][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.238641][ T4084] bridge_slave_0: entered allmulticast mode [ 39.245062][ T4084] bridge_slave_0: entered promiscuous mode [ 39.254137][ T4084] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.261322][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.272974][ T4084] bridge_slave_1: entered allmulticast mode [ 39.284386][ T4084] bridge_slave_1: entered promiscuous mode [ 39.329041][ T4084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.339597][ T4084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.396794][ T4084] team0: Port device team_slave_0 added [ 39.426409][ T4084] team0: Port device team_slave_1 added [ 39.480730][ T4084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.487838][ T4084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.513871][ T4084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.577841][ T4173] loop2: detected capacity change from 0 to 1024 [ 39.591736][ T4173] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.609940][ T4173] EXT4-fs: Ignoring removed nobh option [ 39.615602][ T4173] EXT4-fs: Ignoring removed bh option [ 39.623427][ T4084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.630390][ T4084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.654035][ T4173] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 39.656381][ T4084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.785533][ T4191] loop3: detected capacity change from 0 to 512 [ 39.792441][ T4191] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.798677][ T4189] loop1: detected capacity change from 0 to 1024 [ 39.805661][ T4191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.826950][ T4084] hsr_slave_0: entered promiscuous mode [ 39.833142][ T4084] hsr_slave_1: entered promiscuous mode [ 39.839384][ T4084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.847725][ T4084] Cannot create hsr debugfs directory [ 39.851764][ T4191] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.861825][ T4189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.867354][ T4191] EXT4-fs (loop3): 1 truncate cleaned up [ 39.889571][ T4191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.920830][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.008378][ T4210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 40.024413][ T4210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 40.045687][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.056752][ T4209] loop1: detected capacity change from 0 to 2048 [ 40.105964][ T4209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.133463][ T4084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.172469][ T4084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.181441][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.212554][ T4084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.236722][ T4084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.298535][ T4238] loop2: detected capacity change from 0 to 1764 [ 40.356554][ T4084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.381296][ T4249] loop3: detected capacity change from 0 to 512 [ 40.433853][ T4249] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.442987][ T4084] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.461498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.468614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.491517][ T2768] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.498642][ T2768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.517307][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.551739][ T4084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.562188][ T4084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.721232][ T4084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.956331][ T4275] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.009156][ T4084] veth0_vlan: entered promiscuous mode [ 41.034053][ T4324] netlink: 'syz.1.333': attribute type 3 has an invalid length. [ 41.054773][ T4084] veth1_vlan: entered promiscuous mode [ 41.096013][ T4331] batadv_slave_1: entered promiscuous mode [ 41.110718][ T4084] veth0_macvtap: entered promiscuous mode [ 41.132280][ T4329] batadv_slave_1: left promiscuous mode [ 41.145168][ T4325] Falling back ldisc for ttyS3. [ 41.151002][ T4084] veth1_macvtap: entered promiscuous mode [ 41.183808][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.194342][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.204199][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.214679][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.224505][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.234953][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.244812][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.255349][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.293410][ T4349] netlink: 'syz.0.341': attribute type 3 has an invalid length. [ 41.316233][ T4346] loop2: detected capacity change from 0 to 164 [ 41.340237][ T4084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.349429][ T4346] Unsupported NM flag settings (8) [ 41.370481][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.381030][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.390969][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.401472][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.411310][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.421891][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.432009][ T4084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.442475][ T4084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.454684][ T29] kauditd_printk_skb: 5652 callbacks suppressed [ 41.454698][ T29] audit: type=1400 audit(1746995212.309:5671): avc: denied { create } for pid=4358 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.469000][ T4084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.543104][ T29] audit: type=1400 audit(1746995212.349:5672): avc: denied { bind } for pid=4358 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 41.563542][ T29] audit: type=1326 audit(1746995212.369:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 41.565623][ T4084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.586870][ T29] audit: type=1326 audit(1746995212.369:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 41.586905][ T29] audit: type=1326 audit(1746995212.369:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 41.642526][ T4084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.651475][ T4084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.660303][ T4084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.669793][ T4376] loop1: detected capacity change from 0 to 1024 [ 41.689815][ T29] audit: type=1400 audit(1746995212.529:5676): avc: denied { cpu } for pid=4371 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.731445][ T29] audit: type=1326 audit(1746995212.579:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 41.755180][ T29] audit: type=1326 audit(1746995212.579:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 41.778676][ T29] audit: type=1326 audit(1746995212.579:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 41.802059][ T29] audit: type=1326 audit(1746995212.579:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 41.840974][ T4376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.853247][ T4376] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.878369][ T4372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.348: bg 0: block 393: padding at end of block bitmap is not set [ 41.893286][ T4372] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.941946][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.999169][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 42.037165][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 42.061146][ T4413] C: renamed from team_slave_0 (while UP) [ 42.068603][ T4413] netlink: 'wg1': attribute type 1 has an invalid length. [ 42.075910][ T4413] netlink: 152 bytes leftover after parsing attributes in process `wg1'. [ 42.085206][ T4413] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 42.148196][ T4419] loop1: detected capacity change from 0 to 512 [ 42.167271][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.174637][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.188017][ T4419] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.199288][ T4337] bridge_slave_0: entered allmulticast mode [ 42.210058][ T4337] bridge_slave_0: entered promiscuous mode [ 42.221315][ T4419] EXT4-fs (loop1): 1 truncate cleaned up [ 42.230117][ T4419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.243048][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.250197][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.259843][ T4337] bridge_slave_1: entered allmulticast mode [ 42.267501][ T4337] bridge_slave_1: entered promiscuous mode [ 42.300631][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.317792][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.351280][ T4337] team0: Port device team_slave_0 added [ 42.358198][ T4337] team0: Port device team_slave_1 added [ 42.358339][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.404984][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.411981][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.438114][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.472169][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.479204][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.505181][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.519259][ T4434] loop2: detected capacity change from 0 to 512 [ 42.525953][ T4434] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.532807][ T4434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.569802][ T4434] EXT4-fs (loop2): 1 truncate cleaned up [ 42.583249][ T4434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.612261][ T4337] hsr_slave_0: entered promiscuous mode [ 42.623087][ T4434] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 42.642128][ T4337] hsr_slave_1: entered promiscuous mode [ 42.648024][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.655725][ T4337] Cannot create hsr debugfs directory [ 42.704792][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.739645][ T4444] loop0: detected capacity change from 0 to 1764 [ 42.817503][ T4337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.836065][ T4337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.852565][ T4450] loop5: detected capacity change from 0 to 512 [ 42.864863][ T4337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.882020][ T4450] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.882898][ T4454] SELinux: security policydb version 18 (MLS) not backwards compatible [ 42.908492][ T4337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.916502][ T4450] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 42.916701][ T4454] SELinux: failed to load policy [ 42.932445][ T4450] EXT4-fs (loop5): 1 truncate cleaned up [ 42.943255][ T4450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.980485][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.994686][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.018899][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.029610][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.044134][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.051311][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.089537][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.096664][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.109640][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.155348][ T4470] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 43.212407][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.271704][ T4482] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 43.271704][ T4482] program syz.5.377 not setting count and/or reply_len properly [ 43.291521][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 43.300880][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 43.317460][ T4487] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.482547][ T4337] veth0_vlan: entered promiscuous mode [ 43.495677][ T4337] veth1_vlan: entered promiscuous mode [ 43.516648][ T4337] veth0_macvtap: entered promiscuous mode [ 43.524580][ T4337] veth1_macvtap: entered promiscuous mode [ 43.536576][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.544998][ T4521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.547077][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.568737][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.579243][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.589161][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.599692][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.609603][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.620117][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.629968][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.640404][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.652160][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.663792][ T4521] vti0: entered promiscuous mode [ 43.673855][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.684314][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.694152][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.704588][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.714423][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.724964][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.734838][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.738952][ T4459] syz.0.367 (4459) used greatest stack depth: 10248 bytes left [ 43.745276][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.745297][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.745311][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.769121][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.815528][ T4337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.824296][ T4337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.834270][ T4337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.843547][ T4337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.932568][ T4544] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.945028][ T4545] loop5: detected capacity change from 0 to 1024 [ 44.011726][ T4545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.045693][ T4545] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 44.072937][ T4545] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 44.085373][ T4545] EXT4-fs (loop5): This should not happen!! Data will be lost [ 44.085373][ T4545] [ 44.095219][ T4545] EXT4-fs (loop5): Total free blocks count 0 [ 44.101212][ T4545] EXT4-fs (loop5): Free/Dirty block details [ 44.107214][ T4545] EXT4-fs (loop5): free_blocks=68451041280 [ 44.113065][ T4545] EXT4-fs (loop5): dirty_blocks=32 [ 44.118218][ T4545] EXT4-fs (loop5): Block reservation details [ 44.124238][ T4545] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 44.135942][ T4545] syz.5.396 (4545) used greatest stack depth: 10184 bytes left [ 44.149616][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 44.194378][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 44.215187][ T2768] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.433994][ T4588] loop6: detected capacity change from 0 to 128 [ 44.511881][ T4588] syz.6.414: attempt to access beyond end of device [ 44.511881][ T4588] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 44.525142][ T4588] Buffer I/O error on dev loop6, logical block 2065, async page read [ 44.544393][ T4588] syz.6.414: attempt to access beyond end of device [ 44.544393][ T4588] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 44.557714][ T4588] Buffer I/O error on dev loop6, logical block 2066, async page read [ 44.569223][ T4588] syz.6.414: attempt to access beyond end of device [ 44.569223][ T4588] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 44.582383][ T4588] Buffer I/O error on dev loop6, logical block 2067, async page read [ 44.607624][ T4598] loop5: detected capacity change from 0 to 512 [ 44.624592][ T4588] syz.6.414: attempt to access beyond end of device [ 44.624592][ T4588] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 44.637814][ T4588] Buffer I/O error on dev loop6, logical block 2068, async page read [ 44.648165][ T4611] capability: warning: `syz.1.425' uses deprecated v2 capabilities in a way that may be insecure [ 44.652633][ T4588] syz.6.414: attempt to access beyond end of device [ 44.652633][ T4588] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 44.672000][ T4588] Buffer I/O error on dev loop6, logical block 2069, async page read [ 44.695371][ T4613] loop2: detected capacity change from 0 to 1024 [ 44.707150][ T4598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.724758][ T4588] syz.6.414: attempt to access beyond end of device [ 44.724758][ T4588] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 44.738054][ T4588] Buffer I/O error on dev loop6, logical block 2070, async page read [ 44.750522][ T4598] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.752079][ T4613] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.426: Failed to acquire dquot type 0 [ 44.784111][ T4613] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.821216][ T4588] syz.6.414: attempt to access beyond end of device [ 44.821216][ T4588] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 44.834675][ T4588] Buffer I/O error on dev loop6, logical block 2071, async page read [ 44.842801][ T4613] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.426: corrupted inode contents [ 44.856467][ T4613] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.426: mark_inode_dirty error [ 44.856499][ T4588] syz.6.414: attempt to access beyond end of device [ 44.856499][ T4588] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 44.870204][ T3393] Process accounting resumed [ 44.881080][ T4588] Buffer I/O error on dev loop6, logical block 2072, async page read [ 44.953191][ T4588] syz.6.414: attempt to access beyond end of device [ 44.953191][ T4588] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 44.966394][ T4588] Buffer I/O error on dev loop6, logical block 2065, async page read [ 44.999643][ T4588] syz.6.414: attempt to access beyond end of device [ 44.999643][ T4588] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 45.012985][ T4588] Buffer I/O error on dev loop6, logical block 2066, async page read [ 45.028891][ T4613] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.426: corrupted inode contents [ 45.044316][ T4613] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.426: mark_inode_dirty error [ 45.064436][ T4613] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.426: corrupted inode contents [ 45.096246][ T4613] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 45.127292][ T4613] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.426: corrupted inode contents [ 45.143914][ T4613] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.426: mark_inode_dirty error [ 45.156329][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.180267][ T4613] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 45.208048][ T4613] EXT4-fs (loop2): 1 truncate cleaned up [ 45.223159][ T4613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.286967][ T4613] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.346389][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.350461][ T4657] loop0: detected capacity change from 0 to 1024 [ 45.393248][ T4657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.421471][ T4657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.458642][ T4667] IPVS: stopping master sync thread 4668 ... [ 45.465198][ T4668] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.474480][ T4657] EXT4-fs (loop0): shut down requested (0) [ 45.521078][ T4670] SELinux: failed to load policy [ 45.553551][ T4677] netlink: 'syz.6.450': attribute type 21 has an invalid length. [ 45.561397][ T4677] netlink: 'syz.6.450': attribute type 6 has an invalid length. [ 45.569180][ T4677] netlink: 132 bytes leftover after parsing attributes in process `syz.6.450'. [ 45.578567][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.592257][ T4679] loop2: detected capacity change from 0 to 128 [ 45.785234][ T4695] loop6: detected capacity change from 0 to 128 [ 45.888987][ T4703] loop6: detected capacity change from 0 to 512 [ 45.896143][ T4703] EXT4-fs: dax option not supported [ 46.083902][ T4726] loop1: detected capacity change from 0 to 128 [ 46.090730][ T4726] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.103271][ T4726] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.137759][ T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.178405][ T4738] netlink: 'syz.5.478': attribute type 1 has an invalid length. [ 46.257398][ T4748] loop5: detected capacity change from 0 to 164 [ 46.547761][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 46.547776][ T29] audit: type=1326 audit(1746995217.399:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.578084][ T29] audit: type=1326 audit(1746995217.399:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.601575][ T29] audit: type=1326 audit(1746995217.399:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.625002][ T29] audit: type=1326 audit(1746995217.399:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.648592][ T29] audit: type=1326 audit(1746995217.399:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.672110][ T29] audit: type=1326 audit(1746995217.399:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.695636][ T29] audit: type=1326 audit(1746995217.409:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77c41e969 code=0x7ffc0000 [ 46.726860][ T4764] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.740941][ T29] audit: type=1400 audit(1746995217.589:6102): avc: denied { ioctl } for pid=4766 comm="syz.1.493" path="socket:[9554]" dev="sockfs" ino=9554 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.772352][ T29] audit: type=1400 audit(1746995217.619:6103): avc: denied { mount } for pid=4768 comm="syz.5.494" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.795343][ T4770] ucma_write: process 266 (syz.2.491) changed security contexts after opening file descriptor, this is not allowed. [ 46.817603][ T29] audit: type=1400 audit(1746995217.669:6104): avc: denied { unmount } for pid=4084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.866295][ T4779] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 47.079714][ T4798] netlink: 'syz.6.505': attribute type 1 has an invalid length. [ 47.093646][ T4798] bond1: entered promiscuous mode [ 47.098912][ T4798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.117474][ T4798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.124805][ T4798] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 47.135109][ T4798] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 47.146870][ T4798] bond1: (slave ip6gre1): making interface the new active one [ 47.154518][ T4798] ip6gre1: entered promiscuous mode [ 47.162672][ T4798] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 47.239200][ T4817] netlink: 'syz.1.514': attribute type 11 has an invalid length. [ 47.247384][ T4817] netlink: 448 bytes leftover after parsing attributes in process `syz.1.514'. [ 47.354657][ T4833] loop6: detected capacity change from 0 to 256 [ 47.397339][ T4833] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 47.405268][ T4833] FAT-fs (loop6): Filesystem has been set read-only [ 47.415826][ T4833] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 47.423972][ T4833] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 47.432948][ T4843] loop1: detected capacity change from 0 to 128 [ 47.439738][ T4833] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 47.676085][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.546'. [ 47.831127][ T4905] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 47.885333][ T4905] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 48.940004][ T4931] loop0: detected capacity change from 0 to 512 [ 48.965483][ T4931] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 48.992371][ T4931] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.014342][ T4931] EXT4-fs (loop0): 1 truncate cleaned up [ 49.020488][ T4931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.061297][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.154256][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.575'. [ 49.245102][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.253019][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.260787][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.286725][ T4967] atomic_op ffff888122a08128 conn xmit_atomic 0000000000000000 [ 49.292739][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.302226][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.310001][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.317780][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.325558][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.333488][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.341223][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.349005][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.356876][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.364730][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.372509][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.382443][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.390288][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.398377][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.406265][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.414079][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.421849][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.429665][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.437548][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.445441][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.453284][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.461158][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.469026][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.476839][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.484794][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.492659][ T3393] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 49.519760][ T3393] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz1 [ 49.828575][ T5006] netlink: 'syz.0.598': attribute type 21 has an invalid length. [ 49.837435][ T5006] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 49.845192][ T5006] netlink: 144 bytes leftover after parsing attributes in process `syz.0.598'. [ 49.888146][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.601'. [ 49.954592][ T5016] loop6: detected capacity change from 0 to 1024 [ 50.020227][ T5026] SELinux: Context is not valid (left unmapped). [ 50.032217][ T5016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.046263][ T5025] loop5: detected capacity change from 0 to 2048 [ 50.099276][ T5025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.127990][ T4337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.138933][ T5025] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.159175][ T5045] loop0: detected capacity change from 0 to 512 [ 50.175045][ T5045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.228538][ T5045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.241158][ T5045] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.277468][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.358232][ T1907] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.405897][ T1907] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.475963][ T1907] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.570086][ T1907] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.620148][ T5074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 50.626704][ T5074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.634295][ T5074] vhci_hcd vhci_hcd.0: Device attached [ 50.657714][ T5075] loop0: detected capacity change from 0 to 2048 [ 50.658511][ T5071] syz.2.629 (5071) used greatest stack depth: 10136 bytes left [ 50.684095][ T5076] vhci_hcd: connection closed [ 50.692675][ T51] vhci_hcd: stop threads [ 50.701789][ T51] vhci_hcd: release socket [ 50.706307][ T51] vhci_hcd: disconnect device [ 50.711271][ T1907] bridge_slave_1: left allmulticast mode [ 50.716987][ T1907] bridge_slave_1: left promiscuous mode [ 50.722848][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.731583][ T1907] bridge_slave_0: left allmulticast mode [ 50.737323][ T1907] bridge_slave_0: left promiscuous mode [ 50.743066][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.800242][ T1907] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 50.813044][ T1907] ip6gre1 (unregistering): left promiscuous mode [ 50.832160][ T5082] xt_hashlimit: max too large, truncated to 1048576 [ 50.905359][ T1907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.915712][ T1907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.925867][ T1907] bond0 (unregistering): Released all slaves [ 50.934659][ T1907] bond1 (unregistering): Released all slaves [ 51.019480][ T1907] hsr_slave_0: left promiscuous mode [ 51.027181][ T1907] hsr_slave_1: left promiscuous mode [ 51.034492][ T1907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.041910][ T1907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.052257][ T5025] syz.5.607 (5025) used greatest stack depth: 6208 bytes left [ 51.059343][ T5103] loop2: detected capacity change from 0 to 512 [ 51.060190][ T1907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.069151][ T5103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.073380][ T1907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.090968][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.100298][ T1907] veth1_macvtap: left promiscuous mode [ 51.101338][ T5103] EXT4-fs (loop2): 1 truncate cleaned up [ 51.105967][ T1907] veth0_macvtap: left promiscuous mode [ 51.111893][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.118848][ T1907] veth1_vlan: left promiscuous mode [ 51.135970][ T1907] veth0_vlan: left promiscuous mode [ 51.192509][ T5108] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 51.200249][ T5108] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 51.207940][ T5108] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.641'. [ 51.220920][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.267170][ T1907] team0 (unregistering): Port device team_slave_1 removed [ 51.279549][ T1907] team0 (unregistering): Port device team_slave_0 removed [ 51.418972][ T5137] loop7: detected capacity change from 0 to 16384 [ 51.580131][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 51.580145][ T29] audit: type=1400 audit(1746995222.429:6213): avc: denied { connect } for pid=5161 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.606612][ T29] audit: type=1400 audit(1746995222.459:6214): avc: denied { ioctl } for pid=5161 comm="syz.5.658" path="socket:[10406]" dev="sockfs" ino=10406 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.618592][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 51.680191][ T5168] loop5: detected capacity change from 0 to 164 [ 51.724195][ T5168] bio_check_eod: 24 callbacks suppressed [ 51.724209][ T5168] syz.5.661: attempt to access beyond end of device [ 51.724209][ T5168] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.761208][ T5168] syz.5.661: attempt to access beyond end of device [ 51.761208][ T5168] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.805175][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.812300][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.844069][ T29] audit: type=1401 audit(1746995222.679:6215): op=setxattr invalid_context="" [ 51.865071][ T5083] bridge_slave_0: entered allmulticast mode [ 51.886352][ T5083] bridge_slave_0: entered promiscuous mode [ 51.914536][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.921783][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.935495][ T5083] bridge_slave_1: entered allmulticast mode [ 51.942575][ T5083] bridge_slave_1: entered promiscuous mode [ 51.980019][ T5181] loop0: detected capacity change from 0 to 764 [ 51.994224][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.023424][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.033139][ T5181] rock: directory entry would overflow storage [ 52.039405][ T5181] rock: sig=0x4f50, size=4, remaining=3 [ 52.045035][ T5181] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.060484][ T5083] team0: Port device team_slave_0 added [ 52.068064][ T5083] team0: Port device team_slave_1 added [ 52.078314][ T5188] loop1: detected capacity change from 0 to 512 [ 52.107256][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.114282][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.119245][ T29] audit: type=1400 audit(1746995222.959:6216): avc: denied { ioctl } for pid=5191 comm="syz.2.671" path="socket:[11316]" dev="sockfs" ino=11316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.140307][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.176684][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.183691][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.209687][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.235027][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.248802][ T5188] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.252228][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 52.265760][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 52.289753][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 52.310921][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.318599][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.326141][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 52.349210][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.352120][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1, rec_len=0, size=2048 fake=0 [ 52.356863][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.381749][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 52.405292][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 52.432783][ T5188] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.669: path /163/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.457087][ T5083] hsr_slave_0: entered promiscuous mode [ 52.463910][ T5188] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 18: comm syz.1.669: lblock 23 mapped to illegal pblock 18 (length 1) [ 52.465263][ T5083] hsr_slave_1: entered promiscuous mode [ 52.484705][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.492293][ T5083] Cannot create hsr debugfs directory [ 52.516989][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.628712][ T29] audit: type=1400 audit(1746995223.479:6217): avc: denied { bind } for pid=5218 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.639130][ T5217] SELinux: ebitmap: truncated map [ 52.667651][ T5083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.676670][ T29] audit: type=1400 audit(1746995223.479:6218): avc: denied { name_bind } for pid=5218 comm="syz.1.677" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 52.697522][ T29] audit: type=1400 audit(1746995223.479:6219): avc: denied { node_bind } for pid=5218 comm="syz.1.677" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 52.706242][ T5217] SELinux: failed to load policy [ 52.725627][ T5083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.736385][ T5083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.748499][ T5083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.797872][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.821270][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.854165][ T29] audit: type=1400 audit(1746995223.709:6220): avc: denied { watch } for pid=5235 comm="syz.1.685" path="/proc/354/task/355" dev="proc" ino=11604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 52.884786][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.891925][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.913693][ T29] audit: type=1326 audit(1746995223.759:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.5.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c120de969 code=0x7ffc0000 [ 52.937176][ T29] audit: type=1326 audit(1746995223.759:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5244 comm="syz.5.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c120de969 code=0x7ffc0000 [ 52.965661][ T5252] netlink: 830 bytes leftover after parsing attributes in process `syz.2.692'. [ 52.978393][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.985516][ T1907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.020190][ T5083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.030629][ T5083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.130838][ T5272] xt_connbytes: Forcing CT accounting to be enabled [ 53.138817][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.158721][ T5272] set match dimension is over the limit! [ 53.166678][ T5275] loop1: detected capacity change from 0 to 256 [ 53.272996][ T5287] Falling back ldisc for ttyS3. [ 53.301604][ T5300] loop0: detected capacity change from 0 to 164 [ 53.310763][ T5300] Unsupported NM flag settings (8) [ 53.387970][ T5083] veth0_vlan: entered promiscuous mode [ 53.405019][ T5083] veth1_vlan: entered promiscuous mode [ 53.421533][ T5083] veth0_macvtap: entered promiscuous mode [ 53.453986][ T5083] veth1_macvtap: entered promiscuous mode [ 53.473840][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.484379][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.494300][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.504792][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.514764][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.525227][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.535084][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.545552][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.589567][ T5318] netlink: 'syz.0.711': attribute type 3 has an invalid length. [ 53.648567][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.662104][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.672656][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.682627][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.693143][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.703078][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.713502][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.723339][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.733845][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.748992][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.765157][ T5083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.773923][ T5083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.782641][ T5083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.791387][ T5083] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.840116][ T5332] loop1: detected capacity change from 0 to 128 [ 53.875745][ T5332] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.914720][ T5332] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.064509][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.633'. [ 54.435426][ T5430] loop5: detected capacity change from 0 to 128 [ 54.455521][ T5430] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.483560][ T5430] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.501373][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.542030][ T4084] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.620650][ T5458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.756906][ T5483] loop7: detected capacity change from 0 to 512 [ 54.775024][ T5483] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 54.801779][ T5483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 54.802026][ T5483] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.753: corrupted in-inode xattr: e_value size too large [ 54.802201][ T5483] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.753: couldn't read orphan inode 15 (err -117) [ 54.802664][ T5483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.907665][ T5083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.048898][ T5530] IPv6: Can't replace route, no match found [ 55.099248][ T5543] loop2: detected capacity change from 0 to 512 [ 55.105863][ T5543] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.112687][ T5543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.125253][ T5543] EXT4-fs (loop2): 1 truncate cleaned up [ 55.131322][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.163816][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.182254][ T5551] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.214673][ T5557] vti0: entered promiscuous mode [ 55.453375][ T5575] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 55.453375][ T5575] program syz.2.786 not setting count and/or reply_len properly [ 55.496811][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 55.500033][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 55.515080][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 55.544504][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 55.608252][ T5591] loop1: detected capacity change from 0 to 128 [ 55.655846][ T5597] loop1: detected capacity change from 0 to 512 [ 55.663200][ T5597] EXT4-fs: dax option not supported [ 55.719338][ T5605] loop1: detected capacity change from 0 to 128 [ 55.730384][ T5605] syz.1.801: attempt to access beyond end of device [ 55.730384][ T5605] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 55.743643][ T5605] buffer_io_error: 22 callbacks suppressed [ 55.743688][ T5605] Buffer I/O error on dev loop1, logical block 2065, async page read [ 55.758138][ T5605] syz.1.801: attempt to access beyond end of device [ 55.758138][ T5605] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 55.771336][ T5605] Buffer I/O error on dev loop1, logical block 2066, async page read [ 55.779530][ T5605] syz.1.801: attempt to access beyond end of device [ 55.779530][ T5605] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 55.792781][ T5605] Buffer I/O error on dev loop1, logical block 2067, async page read [ 55.801033][ T5605] syz.1.801: attempt to access beyond end of device [ 55.801033][ T5605] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 55.814683][ T5605] Buffer I/O error on dev loop1, logical block 2068, async page read [ 55.822881][ T5605] syz.1.801: attempt to access beyond end of device [ 55.822881][ T5605] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 55.836118][ T5605] Buffer I/O error on dev loop1, logical block 2069, async page read [ 55.850497][ T5605] syz.1.801: attempt to access beyond end of device [ 55.850497][ T5605] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 55.863699][ T5605] Buffer I/O error on dev loop1, logical block 2070, async page read [ 55.873181][ T5605] syz.1.801: attempt to access beyond end of device [ 55.873181][ T5605] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 55.886412][ T5605] Buffer I/O error on dev loop1, logical block 2071, async page read [ 55.894779][ T5605] syz.1.801: attempt to access beyond end of device [ 55.894779][ T5605] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 55.907962][ T5605] Buffer I/O error on dev loop1, logical block 2072, async page read [ 55.916566][ T5605] Buffer I/O error on dev loop1, logical block 2065, async page read [ 55.924847][ T5605] Buffer I/O error on dev loop1, logical block 2066, async page read [ 56.136010][ T5636] loop7: detected capacity change from 0 to 1024 [ 56.136250][ T5638] loop1: detected capacity change from 0 to 256 [ 56.148404][ T5636] EXT4-fs: Ignoring removed oldalloc option [ 56.155970][ T5636] EXT4-fs: Ignoring removed orlov option [ 56.162420][ T5636] EXT4-fs (loop7): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 56.205111][ T5643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.819'. [ 56.226158][ T5636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.241718][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.249325][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.256826][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.353793][ T5083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.365969][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.373468][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.380898][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.388420][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.395894][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.403349][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.410965][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.418634][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.426137][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.433577][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.441395][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.448928][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.456437][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.463870][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.471261][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.478802][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.486426][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.493909][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.501306][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.508750][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.516180][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.523588][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.530979][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.538428][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.550937][ T3390] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.600925][ T5668] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 56.612277][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 56.612292][ T29] audit: type=1400 audit(1746995227.459:6320): avc: denied { write } for pid=5669 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.658671][ T29] audit: type=1400 audit(1746995227.499:6321): avc: denied { ioctl } for pid=5671 comm="syz.2.832" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.683773][ T29] audit: type=1326 audit(1746995227.509:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.707149][ T29] audit: type=1326 audit(1746995227.509:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.738886][ T5675] syz.1.831 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.749399][ T29] audit: type=1326 audit(1746995227.589:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.772889][ T29] audit: type=1326 audit(1746995227.589:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.796274][ T29] audit: type=1326 audit(1746995227.589:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.819624][ T29] audit: type=1326 audit(1746995227.589:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.842958][ T29] audit: type=1326 audit(1746995227.589:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.866325][ T29] audit: type=1326 audit(1746995227.589:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfd9fe969 code=0x7ffc0000 [ 56.874801][ T5679] SELinux: security policydb version 18 (MLS) not backwards compatible [ 56.915457][ T5679] SELinux: failed to load policy [ 56.921038][ T5681] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 56.941905][ T5681] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 57.012280][ T5694] netlink: 'syz.2.840': attribute type 298 has an invalid length. [ 57.031677][ T5698] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.044508][ T5697] IPVS: stopping master sync thread 5698 ... [ 57.075551][ T5702] loop0: detected capacity change from 0 to 1024 [ 57.099835][ T5702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.136354][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.154226][ T5718] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 57.382373][ T5745] bond1: entered promiscuous mode [ 57.387532][ T5745] bond1: entered allmulticast mode [ 57.394453][ T5745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.404814][ T5745] bond1 (unregistering): Released all slaves [ 57.419775][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.865'. [ 57.519020][ T5757] loop7: detected capacity change from 0 to 1764 [ 57.617792][ T5773] Invalid ELF header magic: != ELF [ 57.817974][ T5798] loop7: detected capacity change from 0 to 1024 [ 57.847974][ T5798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.961546][ T5806] netlink: 'syz.0.890': attribute type 21 has an invalid length. [ 57.973968][ T5798] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.887: Abort forced by user [ 57.984978][ T5806] netlink: 'syz.0.890': attribute type 6 has an invalid length. [ 57.992663][ T5806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.890'. [ 58.004605][ T5798] EXT4-fs (loop7): Remounting filesystem read-only [ 58.011229][ T5798] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.093773][ T5817] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.173691][ T5816] IPVS: stopping master sync thread 5817 ... [ 58.182580][ T5825] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 58.451981][ T5855] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 58.500871][ T5858] loop0: detected capacity change from 0 to 512 [ 58.549857][ T5858] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.575845][ T5858] EXT4-fs (loop0): mount failed [ 58.597592][ T5871] loop5: detected capacity change from 0 to 1024 [ 58.607115][ T5083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.635129][ T5871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.666409][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.701809][ T5879] loop5: detected capacity change from 0 to 512 [ 58.717232][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.730830][ T5879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.746515][ T5879] EXT4-fs (loop5): 1 truncate cleaned up [ 58.752526][ T5879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.786197][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.828294][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.843838][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.878412][ T5886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.924'. [ 58.887513][ T5886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.924'. [ 58.935886][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.980734][ T5881] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.004605][ T5881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017068][ T5881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029683][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.031501][ T5904] loop7: detected capacity change from 0 to 512 [ 59.045749][ T5904] EXT4-fs: Ignoring removed nobh option [ 59.075921][ T5904] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.932: invalid indirect mapped block 256 (level 2) [ 59.113334][ T5904] EXT4-fs (loop7): 2 truncates cleaned up [ 59.119782][ T5904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.141514][ T5904] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.932: bg 0: block 5: invalid block bitmap [ 59.191480][ T5083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.304397][ T5934] loop2: detected capacity change from 0 to 512 [ 59.304397][ T5938] loop1: detected capacity change from 0 to 128 [ 59.323016][ T5934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.338974][ T5934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.405932][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.418952][ T5954] Zero length message leads to an empty skb [ 59.427023][ T5952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5952 comm=syz.1.956 [ 59.439536][ T5952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5952 comm=syz.1.956 [ 59.453781][ T5934] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.509306][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.545853][ T5965] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.634928][ T5983] loop5: detected capacity change from 0 to 128 [ 59.681035][ T5987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 59.687642][ T5987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.695389][ T5987] vhci_hcd vhci_hcd.0: Device attached [ 59.704919][ T5988] vhci_hcd: connection closed [ 59.705191][ T37] vhci_hcd: stop threads [ 59.714224][ T37] vhci_hcd: release socket [ 59.718686][ T37] vhci_hcd: disconnect device [ 59.778321][ T5995] SELinux: failed to load policy [ 59.859246][ T6011] netlink: 'syz.7.981': attribute type 21 has an invalid length. [ 59.869070][ T6011] netlink: 'syz.7.981': attribute type 1 has an invalid length. [ 59.876894][ T6011] netlink: 144 bytes leftover after parsing attributes in process `syz.7.981'. [ 59.889649][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 60.095985][ T6047] Unknown options in mask 5 [ 60.199397][ T6064] netlink: 'syz.7.1006': attribute type 4 has an invalid length. [ 60.212801][ T6064] netlink: 'syz.7.1006': attribute type 4 has an invalid length. [ 60.677399][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 60.686863][ T6107] IPVS: Error joining to the multicast group [ 60.725525][ T6109] vhci_hcd: invalid port number 96 [ 60.730702][ T6109] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 60.895580][ T6128] 9pnet: p9_errstr2errno: server reported unknown error %U [ 60.956001][ T6137] loop7: detected capacity change from 0 to 512 [ 60.962849][ T6137] EXT4-fs: Ignoring removed oldalloc option [ 60.971015][ T6137] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.983854][ T6137] EXT4-fs (loop7): 1 truncate cleaned up [ 60.990020][ T6137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.022668][ T5083] EXT4-fs error (device loop7): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 61.037105][ T5083] EXT4-fs error (device loop7): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 61.120174][ T6152] loop1: detected capacity change from 0 to 256 [ 61.147743][ T6152] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 61.155691][ T6152] FAT-fs (loop1): Filesystem has been set read-only [ 61.162459][ T6152] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 61.170492][ T6152] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 61.178548][ T6152] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 61.225736][ T5083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.237828][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.276080][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.325997][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.386861][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.538591][ T51] bridge_slave_1: left allmulticast mode [ 61.544340][ T51] bridge_slave_1: left promiscuous mode [ 61.549991][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.558929][ T51] bridge_slave_0: left allmulticast mode [ 61.564668][ T51] bridge_slave_0: left promiscuous mode [ 61.570376][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.615308][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 61.615321][ T29] audit: type=1326 audit(1746995232.469:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.645091][ T29] audit: type=1326 audit(1746995232.469:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.681436][ T29] audit: type=1326 audit(1746995232.469:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.705000][ T29] audit: type=1326 audit(1746995232.469:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.728462][ T29] audit: type=1326 audit(1746995232.469:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.751892][ T29] audit: type=1326 audit(1746995232.469:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.775780][ T29] audit: type=1326 audit(1746995232.469:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.799616][ T29] audit: type=1326 audit(1746995232.469:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.823136][ T29] audit: type=1326 audit(1746995232.469:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.846608][ T29] audit: type=1326 audit(1746995232.499:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 61.876208][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.886792][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.901724][ T51] bond0 (unregistering): Released all slaves [ 61.920613][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 61.935576][ T6200] loop2: detected capacity change from 0 to 1024 [ 61.959119][ T6200] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.970262][ T6200] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.981678][ T6200] JBD2: no valid journal superblock found [ 61.987530][ T6200] EXT4-fs (loop2): Could not load journal inode [ 62.006679][ T6200] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 62.026913][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.034021][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.041199][ T6169] bridge_slave_0: entered allmulticast mode [ 62.048088][ T6169] bridge_slave_0: entered promiscuous mode [ 62.055103][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.062244][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.069869][ T6169] bridge_slave_1: entered allmulticast mode [ 62.078630][ T6169] bridge_slave_1: entered promiscuous mode [ 62.093572][ T51] hsr_slave_0: left promiscuous mode [ 62.100865][ T51] hsr_slave_1: left promiscuous mode [ 62.111824][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.119495][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.131199][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.138834][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.149889][ T51] veth1_macvtap: left promiscuous mode [ 62.155437][ T51] veth0_macvtap: left promiscuous mode [ 62.161040][ T51] veth1_vlan: left promiscuous mode [ 62.166698][ T51] veth0_vlan: left promiscuous mode [ 62.279557][ T51] team0 (unregistering): Port device team_slave_1 removed [ 62.301322][ T51] team0 (unregistering): Port device team_slave_0 removed [ 62.394388][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.430834][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.450751][ T6244] netlink: 'syz.5.1085': attribute type 3 has an invalid length. [ 62.471330][ T6169] team0: Port device team_slave_0 added [ 62.494079][ T6169] team0: Port device team_slave_1 added [ 62.524716][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.531760][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.557757][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.633168][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.640279][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.666469][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.773326][ T6169] hsr_slave_0: entered promiscuous mode [ 62.779570][ T6169] hsr_slave_1: entered promiscuous mode [ 62.785713][ T6169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.812843][ T6169] Cannot create hsr debugfs directory [ 62.966007][ T6169] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 62.985389][ T6169] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 62.995258][ T6169] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 63.014948][ T6169] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 63.081620][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.111296][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.133846][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.140979][ T1907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.180730][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.187891][ T1907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.220318][ T6169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.333432][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.428953][ T6316] loop1: detected capacity change from 0 to 512 [ 63.435833][ T6316] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.445545][ T6316] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.459844][ T6316] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.468145][ T6316] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.476461][ T6316] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0 [ 63.496640][ T6316] EXT4-fs (loop1): Remounting filesystem read-only [ 63.504614][ T6324] netlink: 'syz.2.1114': attribute type 3 has an invalid length. [ 63.520568][ T6316] EXT4-fs (loop1): 1 orphan inode deleted [ 63.533423][ T6316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.588491][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.605577][ T6169] veth0_vlan: entered promiscuous mode [ 63.635061][ T6169] veth1_vlan: entered promiscuous mode [ 63.664699][ T6169] veth0_macvtap: entered promiscuous mode [ 63.671974][ T6169] veth1_macvtap: entered promiscuous mode [ 63.685476][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.696018][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.705877][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.716395][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.726294][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.736895][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.746957][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.757727][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.778511][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 63.806856][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.817458][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 63.838553][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.847815][ T6346] loop1: detected capacity change from 0 to 1024 [ 63.849212][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.865322][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.875874][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.885798][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.887994][ T6348] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 63.896332][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.913726][ T6346] EXT4-fs: Ignoring removed oldalloc option [ 63.914034][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.927447][ T6346] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.930243][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.950675][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.960671][ T6169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.969580][ T6169] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.978322][ T6169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.987053][ T6169] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.998513][ T6346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.108996][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.192531][ T6363] loop1: detected capacity change from 0 to 2048 [ 64.199465][ T6363] EXT4-fs: Ignoring removed bh option [ 64.223101][ T6364] 9pnet: Could not find request transport: 0xffffffffffffffff [ 64.491849][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 64.499330][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 64.506738][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 64.531470][ T10] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 64.531552][ T6403] xt_hashlimit: size too large, truncated to 1048576 [ 64.552575][ T6404] xt_hashlimit: max too large, truncated to 1048576 [ 64.655464][ T6380] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.671869][ T6380] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 242 with error 28 [ 64.684359][ T6380] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.684359][ T6380] [ 64.694198][ T6380] EXT4-fs (loop1): Total free blocks count 0 [ 64.700196][ T6380] EXT4-fs (loop1): Free/Dirty block details [ 64.706136][ T6380] EXT4-fs (loop1): free_blocks=2415919104 [ 64.711870][ T6380] EXT4-fs (loop1): dirty_blocks=8224 [ 64.717245][ T6380] EXT4-fs (loop1): Block reservation details [ 64.723268][ T6380] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 64.792269][ T1907] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 242 with max blocks 2048 with error 28 [ 64.804955][ T1907] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.804955][ T1907] [ 64.819364][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1152'. [ 65.020233][ T6447] $H: renamed from bond0 (while UP) [ 65.034756][ T6447] $H: entered promiscuous mode [ 65.040188][ T6447] bond_slave_0: entered promiscuous mode [ 65.046075][ T6447] bond_slave_1: entered promiscuous mode [ 65.112759][ T6464] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 65.155349][ T6468] loop1: detected capacity change from 0 to 512 [ 65.168273][ T6468] EXT4-fs: Ignoring removed nobh option [ 65.175759][ T6468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 65.224862][ T6468] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1174: attempt to clear invalid blocks 2 len 1 [ 65.256331][ T6468] EXT4-fs (loop1): Remounting filesystem read-only [ 65.303102][ T6468] EXT4-fs (loop1): 1 truncate cleaned up [ 65.406164][ T6493] tipc: Started in network mode [ 65.411136][ T6493] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.421259][ T6493] tipc: Enabled bearer , priority 10 [ 65.430003][ T6493] tipc: Disabling bearer [ 65.577776][ T6517] SELinux: failed to load policy [ 65.610756][ T6523] loop5: detected capacity change from 0 to 1024 [ 65.633120][ T6523] EXT4-fs: inline encryption not supported [ 65.647281][ T6523] EXT4-fs: Ignoring removed bh option [ 65.805712][ T6557] rdma_op ffff888122a0a980 conn xmit_rdma 0000000000000000 [ 65.866666][ T6565] loop1: detected capacity change from 0 to 512 [ 65.891853][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.905531][ T6571] netlink: 'syz.5.1210': attribute type 1 has an invalid length. [ 65.928747][ T6565] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1207: invalid block [ 65.952869][ T6565] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1207: invalid indirect mapped block 4294967295 (level 1) [ 65.976039][ T6565] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1207: invalid indirect mapped block 4294967295 (level 1) [ 66.025650][ T6565] EXT4-fs (loop1): 2 truncates cleaned up [ 66.152846][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1220'. [ 66.161929][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.169586][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.179961][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.187600][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.209719][ T6602] vlan2: entered allmulticast mode [ 66.214880][ T6602] $H: entered allmulticast mode [ 66.220034][ T6602] bond_slave_0: entered allmulticast mode [ 66.225824][ T6602] bond_slave_1: entered allmulticast mode [ 66.240512][ T6600] SELinux: ebitmap: truncated map [ 66.246205][ T6600] SELinux: failed to load policy [ 66.510239][ T6653] xt_hashlimit: max too large, truncated to 1048576 [ 66.593620][ T6668] loop1: detected capacity change from 0 to 1024 [ 66.621418][ T6668] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.636616][ T6668] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 66.649078][ T6668] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.649078][ T6668] [ 66.658874][ T6668] EXT4-fs (loop1): Total free blocks count 0 [ 66.664886][ T6668] EXT4-fs (loop1): Free/Dirty block details [ 66.670815][ T6668] EXT4-fs (loop1): free_blocks=68451041280 [ 66.676721][ T6668] EXT4-fs (loop1): dirty_blocks=32 [ 66.681885][ T6668] EXT4-fs (loop1): Block reservation details [ 66.687941][ T6668] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 66.725328][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.737653][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.737653][ T37] [ 66.927905][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 66.927924][ T29] audit: type=1326 audit(1746995237.779:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 66.957678][ T29] audit: type=1326 audit(1746995237.779:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 66.995979][ T29] audit: type=1326 audit(1746995237.779:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.019485][ T29] audit: type=1326 audit(1746995237.779:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.042948][ T29] audit: type=1326 audit(1746995237.779:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.066526][ T29] audit: type=1326 audit(1746995237.779:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.090017][ T29] audit: type=1326 audit(1746995237.779:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.113483][ T29] audit: type=1326 audit(1746995237.779:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.136887][ T29] audit: type=1326 audit(1746995237.779:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.160430][ T29] audit: type=1326 audit(1746995237.779:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65110de969 code=0x7ffc0000 [ 67.225595][ T6700] loop8: detected capacity change from 0 to 512 [ 67.233710][ T6700] EXT4-fs: dax option not supported [ 67.259825][ T6705] loop8: detected capacity change from 0 to 128 [ 67.266613][ T6705] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.280878][ T6705] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.312592][ T1907] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.330748][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1276'. [ 67.372144][ T6715] batadv_slave_1: entered promiscuous mode [ 67.388741][ T6714] batadv_slave_1: left promiscuous mode [ 67.446418][ T6727] loop2: detected capacity change from 0 to 2048 [ 67.466917][ T6735] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.479965][ T6727] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.514826][ T6741] loop5: detected capacity change from 0 to 164 [ 67.527970][ T6741] Unsupported NM flag settings (8) [ 67.735724][ T6756] loop1: detected capacity change from 0 to 1764 [ 67.782953][ T6759] Falling back ldisc for ttyS3. [ 67.902466][ T6768] loop8: detected capacity change from 0 to 1764 [ 68.082959][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 68.091879][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 68.104891][ T6802] loop8: detected capacity change from 0 to 2048 [ 68.174827][ T6169] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 68.473223][ T6840] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 68.504966][ T6840] bond1: entered promiscuous mode [ 68.510935][ T6840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.530126][ T6840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.537588][ T6840] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 68.548014][ T6840] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 68.564409][ T6840] bond1: (slave ip6gre1): making interface the new active one [ 68.572131][ T6840] ip6gre1: entered promiscuous mode [ 68.580448][ T6840] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 68.731935][ T6855] loop1: detected capacity change from 0 to 1024 [ 68.761408][ T6863] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.787309][ T6865] loop5: detected capacity change from 0 to 512 [ 68.808895][ T6865] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 68.822000][ T6865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 68.834539][ T6865] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1341: corrupted in-inode xattr: e_value size too large [ 68.849925][ T6865] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1341: couldn't read orphan inode 15 (err -117) [ 68.959128][ T6877] netlink: 'syz.8.1345': attribute type 10 has an invalid length. [ 69.762933][ T6915] loop5: detected capacity change from 0 to 256 [ 69.900926][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.926017][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.944848][ T6945] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 70.061489][ T6967] loop1: detected capacity change from 0 to 1024 [ 70.069780][ T6969] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1387'. [ 70.080767][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.089829][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.121377][ T6967] EXT4-fs mount: 18 callbacks suppressed [ 70.121429][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.164353][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.221904][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 70.230875][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 70.245555][ T6982] wireguard1: entered promiscuous mode [ 70.251097][ T6982] wireguard1: entered allmulticast mode [ 70.319254][ T6991] SELinux: syz.0.1396 (6991) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.384370][ T6995] loop1: detected capacity change from 0 to 8192 [ 70.453765][ T7010] loop1: detected capacity change from 0 to 512 [ 70.464711][ T7010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.518688][ T7018] loop2: detected capacity change from 0 to 1024 [ 70.527399][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.544754][ T7018] EXT4-fs: Ignoring removed oldalloc option [ 70.551989][ T7018] EXT4-fs: Ignoring removed orlov option [ 70.558198][ T7010] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.571601][ T7018] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 70.594187][ T7018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.611120][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.755579][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.807654][ T7054] loop5: detected capacity change from 0 to 128 [ 70.825613][ T7052] loop8: detected capacity change from 0 to 512 [ 70.828166][ T7049] loop2: detected capacity change from 0 to 256 [ 70.848049][ T7049] FAT-fs (loop2): codepage cp874 not found [ 70.855048][ T7052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.873048][ T7052] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.890047][ T3393] Process accounting resumed [ 70.932636][ T6169] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.965488][ T7070] loop2: detected capacity change from 0 to 1024 [ 70.972387][ T7070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.993454][ T7070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.054107][ T7070] EXT4-fs (loop2): shut down requested (0) [ 71.120042][ T7098] netlink: 'syz.8.1441': attribute type 1 has an invalid length. [ 71.139484][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.148694][ T7098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.195568][ T7098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.203265][ T7098] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 71.215628][ T7098] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 71.224153][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.233114][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.249880][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.270532][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.279431][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.313226][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.330341][ T7116] loop2: detected capacity change from 0 to 2048 [ 71.351088][ T7121] loop8: detected capacity change from 0 to 764 [ 71.361100][ T7121] rock: directory entry would overflow storage [ 71.361639][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 71.367282][ T7121] rock: sig=0x4f50, size=4, remaining=3 [ 71.367300][ T7121] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.417787][ T7125] IPVS: Error joining to the multicast group [ 71.425138][ T7129] loop8: detected capacity change from 0 to 512 [ 71.432088][ T7129] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 71.448036][ T7129] EXT4-fs (loop8): 1 truncate cleaned up [ 71.454230][ T7128] loop1: detected capacity change from 0 to 1024 [ 71.454745][ T7129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.460923][ T7128] EXT4-fs: Ignoring removed nobh option [ 71.478729][ T7128] EXT4-fs: Ignoring removed nobh option [ 71.484637][ T7128] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 71.495058][ T7128] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.1455: inode #4294967295: comm syz.1.1455: iget: illegal inode # [ 71.513587][ T6169] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.526014][ T7128] EXT4-fs (loop1): no journal found [ 71.531391][ T7128] EXT4-fs (loop1): can't get journal size [ 71.544756][ T7128] EXT4-fs (loop1): failed to initialize system zone (-22) [ 71.552069][ T7128] EXT4-fs (loop1): mount failed [ 71.674607][ T7152] 9pnet: p9_errstr2errno: server reported unknown error %U [ 71.712085][ T7156] openvswitch: netlink: Message has 6 unknown bytes. [ 71.933637][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 71.933648][ T29] audit: type=1326 audit(1746995242.789:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 71.963528][ T29] audit: type=1326 audit(1746995242.789:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 71.987078][ T29] audit: type=1326 audit(1746995242.789:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.010982][ T29] audit: type=1326 audit(1746995242.789:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.034465][ T29] audit: type=1326 audit(1746995242.789:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.057956][ T29] audit: type=1326 audit(1746995242.789:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.081587][ T29] audit: type=1326 audit(1746995242.789:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.105111][ T29] audit: type=1326 audit(1746995242.789:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.128613][ T29] audit: type=1326 audit(1746995242.789:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.153098][ T29] audit: type=1326 audit(1746995242.789:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa77c451225 code=0x7ffc0000 [ 72.154856][ T7162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7162 comm=syz.5.1468 [ 72.227184][ T7168] loop5: detected capacity change from 0 to 512 [ 72.233864][ T7168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.241111][ T7168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.264674][ T7168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.277276][ T7168] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.301104][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.332307][ T7174] loop8: detected capacity change from 0 to 2048 [ 72.346589][ T7174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.362309][ T7178] loop2: detected capacity change from 0 to 1024 [ 72.369277][ T7178] EXT4-fs: Ignoring removed bh option [ 72.386001][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 72.388861][ T6169] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.435165][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 72.646300][ T7218] bridge0: entered promiscuous mode [ 72.658308][ T7218] bridge0: port 3(macvlan2) entered blocking state [ 72.664959][ T7218] bridge0: port 3(macvlan2) entered disabled state [ 72.677497][ T7218] macvlan2: entered allmulticast mode [ 72.682988][ T7218] bridge0: entered allmulticast mode [ 72.700666][ T7218] macvlan2: left allmulticast mode [ 72.705882][ T7218] bridge0: left allmulticast mode [ 72.717616][ T7218] bridge0: left promiscuous mode [ 72.824070][ T7224] vhci_hcd: invalid port number 96 [ 72.829346][ T7224] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 72.961186][ T7253] netlink: 'syz.8.1508': attribute type 3 has an invalid length. [ 73.373169][ T7318] loop8: detected capacity change from 0 to 1024 [ 73.380006][ T7318] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.391100][ T7318] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.405518][ T7318] JBD2: no valid journal superblock found [ 73.411308][ T7318] EXT4-fs (loop8): Could not load journal inode [ 73.619091][ T7318] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 73.636484][ T7339] xt_hashlimit: max too large, truncated to 1048576 [ 73.715856][ T7353] netlink: 'syz.5.1557': attribute type 17 has an invalid length. [ 73.723856][ T7353] netlink: 'syz.5.1557': attribute type 41 has an invalid length. [ 73.823070][ T7367] xt_hashlimit: max too large, truncated to 1048576 [ 73.940951][ T7387] loop5: detected capacity change from 0 to 128 [ 73.979104][ T7387] EXT4-fs: Ignoring removed nobh option [ 73.992000][ T7387] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.042812][ T7387] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.098788][ T4084] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.185800][ T7411] raw_sendmsg: syz.5.1584 forgot to set AF_INET. Fix it! [ 74.324979][ T7422] ================================================================== [ 74.333117][ T7422] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 74.341728][ T7422] [ 74.344048][ T7422] write to 0xffff888115437528 of 8 bytes by task 7425 on cpu 1: [ 74.351681][ T7422] shmem_file_splice_read+0x444/0x5d0 [ 74.357073][ T7422] splice_direct_to_actor+0x26c/0x680 [ 74.362448][ T7422] do_splice_direct+0xda/0x150 [ 74.367209][ T7422] do_sendfile+0x380/0x640 [ 74.371633][ T7422] __x64_sys_sendfile64+0x105/0x150 [ 74.376843][ T7422] x64_sys_call+0xb39/0x2fb0 [ 74.381432][ T7422] do_syscall_64+0xd0/0x1a0 [ 74.385940][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.391830][ T7422] [ 74.394145][ T7422] write to 0xffff888115437528 of 8 bytes by task 7422 on cpu 0: [ 74.401763][ T7422] shmem_file_splice_read+0x444/0x5d0 [ 74.407148][ T7422] splice_direct_to_actor+0x26c/0x680 [ 74.412535][ T7422] do_splice_direct+0xda/0x150 [ 74.417295][ T7422] do_sendfile+0x380/0x640 [ 74.421720][ T7422] __x64_sys_sendfile64+0x105/0x150 [ 74.426930][ T7422] x64_sys_call+0xb39/0x2fb0 [ 74.431517][ T7422] do_syscall_64+0xd0/0x1a0 [ 74.436020][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.441927][ T7422] [ 74.444250][ T7422] value changed: 0x0000000000001a2c -> 0x0000000000001a2d [ 74.451351][ T7422] [ 74.453666][ T7422] Reported by Kernel Concurrency Sanitizer on: [ 74.459828][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.0.1589 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 74.472260][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 74.482316][ T7422] ================================================================== [ 74.490494][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190c4200: rx timeout, send abort [ 74.883633][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190c5e00: rx timeout, send abort [ 74.998693][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190c4200: abort rx timeout. Force session deactivation [ 75.391895][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190c5e00: abort rx timeout. Force session deactivation