last executing test programs: 1m2.106314537s ago: executing program 4 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x1000000000000000) 1m2.044755121s ago: executing program 4 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m1.999559435s ago: executing program 4 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1m1.974108328s ago: executing program 4 (id=725): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_INPUT2(r0, 0x0, 0x67) 1m1.860572067s ago: executing program 4 (id=730): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 58.637157913s ago: executing program 4 (id=743): semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 58.636292403s ago: executing program 32 (id=743): semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 23.748022004s ago: executing program 5 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000abc0)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 23.612904535s ago: executing program 5 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 23.573193888s ago: executing program 5 (id=1830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind=r']) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 23.509042383s ago: executing program 5 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) 23.42106026s ago: executing program 5 (id=1838): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0xe}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23.244950554s ago: executing program 5 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x121000e, &(0x7f0000000780)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'min_batch_time'}}, {@seclabel}, {@hash}, {@uid_gt={'uid>', 0xee01}}]}, 0x1, 0x542, &(0x7f0000000140)="$eJzs3c1vI2cZAPBnnHhJuinZAodSqWVFi3YrWGfT0Dbi0HYF4lYBWu5LlHijKE68ip12bVVVKg4ckRCilThx4oLEH4CE+iegSpXoHQECVbCFAwdgqhmP98MdZxOtHUfO7ydN/M47H8/z2rH9zodnAjizLkbEaxExExHPR8RiUV8phjjoDdl8n9x5az0bsinX/5FEUtRF5MW7zheLzfUeSrU63e21RqO+V4wvtXduLbU63StbO2ub9c367srK8kurL6++uHp1JO3M2vXKd/76i5/++ruv/P4bb/7pxt8vv50l/e1ietGOkfso/1vNnou7ZiNibxzBJmCmaE910okAAHAkWR//CxHx1bz/vxgzeW8uN9ilmzv57AAAAIBRSF9diP8mEWna37xPAQAAgCnzakQsRFKpFecCLESlUqv1zuH9UjxWaTRb7a/fbO7vbmTT8jM9Kze3GvWrxTm1F6KaZOPLefne+AsD4ysR8URE/HxxPh+vrTcbGxPe9wEAAABnxfmB7f9/H/S2/wEAAIApc2HSCQAAAABjV2z/zwzWJxPIBQAAABgPx/8BAABgqn3/9dezIe3f/3rjjc7+dvONKxv11nZtZ3+9tt7cu1XbbDY382v27TxsfY1m89Y3Y3f/9lK73movtTrdGzvN/d32jS33DwQAAIBJeeIr73+URMTBt+bzIXMuyn4MUHCuAEyNynFm/sv48gBO3rCveWD6zU46AWByDo6/yMVx5AFMzAOX+ijpFNx/8s4D+wz+ML6cAACA0br05fLj//md/iedHDBWxzr+D0wVx//h7Drm8f8PxpUHcPKqegBw5j3sVh+lF++YH3L8/1zZzGl66LoAAICxW8iHpFIrjgUuRKVSq0U8nv/Uv5rc3GrUr0bE5yPij4vVz2Xjy/mSidsDAgAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAADDVIip/S4r7f11afG5hcP/AueQ/i1Hc0uvNX15/9/biXHtvOav/59369nvX37291m7vvTCJPRgAAADAoP52ev64POlsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJg2n9x5a70/nGTcj6/F9+JCWfzZmMsf56IaEY/9K4nZ+5ZLImJmBPEP3omIJ8viJ1lacaHIYjB+JSLmRx+/em/K3fhPp2laGv/8COLDWfb+tYh4rez9X4mL+WP5+3+2GB7Vx9fyN3lp/P7n38yQz7/HjxjjqQ9/uzQ0/jsRT82Wf/714ydD4j9btsKSJ+VHP+x2P1PZW3mkv4q4VPr9kzwQa6m9c2up1ele2dpZ26xv1ndXVpZfWn159cXVq0s3txr14m9pG3/29O/+P1D1v7Qnb398Nv5PoveyHNr+57LCfZ/YkQ6GKYJ9ePvOF3vF6sAq8viXny1//Z88JH72P/G14nsgm36pXz7ole/3zG8+eKY0sSL+xpDn/2Gv/+VhKx3w/A9+/OcjzgoAnIBWp7u91mjU945UmD/OzJ3udppG9GveS9P0mIsrnGCh37sbW4i509LSU1DI+tanII1hhVHs2QIAAE6be53+Iy/y9lgTAgAAAAAAAAAAAAAAAAAAgDOo1YnK4dcDS9OIR7uc2GDMg8k0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUJ8GAAD//4gf0qc=") 23.233186665s ago: executing program 33 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x121000e, &(0x7f0000000780)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'min_batch_time'}}, {@seclabel}, {@hash}, {@uid_gt={'uid>', 0xee01}}]}, 0x1, 0x542, &(0x7f0000000140)="$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") 1.873954701s ago: executing program 2 (id=2316): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4c}}, 0x0) 1.731364533s ago: executing program 2 (id=2320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 1.571282846s ago: executing program 2 (id=2322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$BLKROSET(r1, 0x125d, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) 1.541091518s ago: executing program 2 (id=2334): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.499854971s ago: executing program 2 (id=2326): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 1.394363939s ago: executing program 2 (id=2329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.175223227s ago: executing program 6 (id=2341): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="a534", 0x2, 0x11, 0x0, 0x0) 1.159164428s ago: executing program 6 (id=2342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x64842, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.071841755s ago: executing program 3 (id=2344): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a50", 0x86}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1.071224385s ago: executing program 0 (id=2354): socket$kcm(0x23, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1.040471098s ago: executing program 0 (id=2345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r1, 0x0, 0x400}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 1.036078128s ago: executing program 3 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x3, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 404.917448ms ago: executing program 3 (id=2348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @random="000000000300"}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031260e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 403.247588ms ago: executing program 0 (id=2358): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) getrandom(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 402.781668ms ago: executing program 6 (id=2359): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 352.300323ms ago: executing program 3 (id=2350): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0xfffffffffffffff1, 0x0) 352.154202ms ago: executing program 6 (id=2351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 303.954776ms ago: executing program 3 (id=2352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) 292.792287ms ago: executing program 1 (id=2353): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="a534", 0x2, 0x11, 0x0, 0x0) 237.991682ms ago: executing program 1 (id=2355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 169.072217ms ago: executing program 6 (id=2357): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x5, 0x7, 0xa) 167.935127ms ago: executing program 0 (id=2369): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 141.230299ms ago: executing program 6 (id=2360): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 140.490369ms ago: executing program 3 (id=2371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 96.076383ms ago: executing program 1 (id=2361): syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x19ee, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 82.760484ms ago: executing program 0 (id=2362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 32.420678ms ago: executing program 1 (id=2363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 14.559509ms ago: executing program 1 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 0s ago: executing program 0 (id=2365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) kernel console output (not intermixed with test programs): ter chain (i_pos 2074) [ 46.803581][ T4953] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 46.820402][ T4953] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 46.953707][ T4978] loop0: detected capacity change from 0 to 1024 [ 46.973061][ T4978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.985695][ T4978] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.999496][ T4983] netlink: 'syz.2.665': attribute type 21 has an invalid length. [ 47.007616][ T4983] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 47.047059][ T4978] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.664: lblock 0 mapped to illegal pblock 0 (length 4) [ 47.060804][ T4978] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 47.073432][ T4978] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.073432][ T4978] [ 47.117630][ T587] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.138989][ T587] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 47.151709][ T587] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.151709][ T587] [ 47.161542][ T587] EXT4-fs (loop0): Total free blocks count 0 [ 47.167629][ T587] EXT4-fs (loop0): Free/Dirty block details [ 47.173755][ T587] EXT4-fs (loop0): free_blocks=4293918720 [ 47.179581][ T587] EXT4-fs (loop0): dirty_blocks=16 [ 47.184738][ T587] EXT4-fs (loop0): Block reservation details [ 47.373440][ T5008] loop2: detected capacity change from 0 to 1024 [ 47.384559][ T5008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.413519][ T587] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.429324][ T587] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.442106][ T5008] loop2: detected capacity change from 1024 to 127 [ 47.451185][ T587] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.459617][ T587] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.460814][ T5008] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 47.503626][ T3312] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -12) [ 47.523800][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.541765][ T5010] kmmpd-loop2: attempt to access beyond end of device [ 47.541765][ T5010] loop2: rw=14337, sector=128, nr_sectors = 2 limit=127 [ 47.555520][ T5010] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 47.640800][ T5028] loop0: detected capacity change from 0 to 8192 [ 47.702236][ T5028] loop0: p1 p2 p4 < > [ 47.706368][ T5028] loop0: partition table partially beyond EOD, truncated [ 47.722686][ T5028] loop0: p1 start 16777216 is beyond EOD, truncated [ 47.729455][ T5028] loop0: p2 size 515840 extends beyond EOD, truncated [ 47.748945][ T5028] loop0: p4 start 16777216 is beyond EOD, truncated [ 47.869582][ T5054] __nla_validate_parse: 11 callbacks suppressed [ 47.869613][ T5054] netlink: 44 bytes leftover after parsing attributes in process `syz.0.697'. [ 47.885025][ T5054] netem: unknown loss type 12 [ 47.889787][ T5054] netem: change failed [ 47.923266][ T5060] netlink: 'syz.4.701': attribute type 2 has an invalid length. [ 47.931007][ T5060] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 47.938876][ T5060] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.701'. [ 48.279697][ T5109] netlink: 332 bytes leftover after parsing attributes in process `syz.4.724'. [ 48.304348][ T5111] loop4: detected capacity change from 0 to 512 [ 48.320593][ T5111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.350699][ T5117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.727'. [ 48.372028][ T5111] loop4: detected capacity change from 512 to 64 [ 48.381898][ T5111] EXT4-fs error (device loop4): ext4_update_inline_data:362: inode #15: comm syz.4.725: missing inline data xattr [ 48.402825][ T3308] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 48.430576][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.537078][ T5136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 48.664892][ T5157] loop3: detected capacity change from 0 to 8192 [ 48.701782][ T5157] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 48.710823][ T5157] FAT-fs (loop3): Filesystem has been set read-only [ 48.718667][ T5157] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 48.727924][ T5157] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 48.737125][ T5157] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 51.583700][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.645550][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.673654][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 51.673672][ T29] audit: type=1400 audit(1756368276.035:1861): avc: denied { mounton } for pid=5304 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.715794][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.784147][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.902294][ T12] bridge_slave_1: left allmulticast mode [ 51.907987][ T12] bridge_slave_1: left promiscuous mode [ 51.913864][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.931620][ T12] bridge_slave_0: left allmulticast mode [ 51.937379][ T12] bridge_slave_0: left promiscuous mode [ 51.943087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.116214][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.137451][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.152902][ T12] bond0 (unregistering): Released all slaves [ 52.222278][ T12] hsr_slave_0: left promiscuous mode [ 52.232876][ T12] hsr_slave_1: left promiscuous mode [ 52.246365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.253843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.261943][ T29] audit: type=1326 audit(1756368276.615:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.0.755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7d025ebe9 code=0x0 [ 52.303106][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.310536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.338181][ T12] veth1_macvtap: left promiscuous mode [ 52.348177][ T12] veth0_macvtap: left promiscuous mode [ 52.359761][ T12] veth1_vlan: left promiscuous mode [ 52.371827][ T12] veth0_vlan: left promiscuous mode [ 52.493622][ T5359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5359 comm=syz.1.769 [ 52.525121][ T12] team0 (unregistering): Port device team_slave_1 removed [ 52.534997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 52.599731][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 52.699615][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.706892][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.714271][ T5304] bridge_slave_0: entered allmulticast mode [ 52.720954][ T5304] bridge_slave_0: entered promiscuous mode [ 52.728175][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.735633][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.744422][ T5304] bridge_slave_1: entered allmulticast mode [ 52.752048][ T5304] bridge_slave_1: entered promiscuous mode [ 52.806766][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.826548][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.852867][ T5304] team0: Port device team_slave_0 added [ 52.859622][ T5304] team0: Port device team_slave_1 added [ 52.898190][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.905188][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.931203][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.950780][ T5403] netlink: 5 bytes leftover after parsing attributes in process `syz.1.785'. [ 52.960076][ T5403] 1{X: renamed from 30{X (while UP) [ 52.968114][ T5403] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 52.992117][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.999083][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.025097][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.097000][ T5304] hsr_slave_0: entered promiscuous mode [ 53.108510][ T5304] hsr_slave_1: entered promiscuous mode [ 53.115414][ T5304] debugfs: 'hsr0' already exists in 'hsr' [ 53.121215][ T5304] Cannot create hsr debugfs directory [ 53.127559][ T29] audit: type=1400 audit(1756368277.485:1863): avc: denied { create } for pid=5413 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.152459][ T29] audit: type=1400 audit(1756368277.515:1864): avc: denied { ioctl } for pid=5413 comm="syz.1.789" path="socket:[12443]" dev="sockfs" ino=12443 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.190431][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.212177][ T5416] tipc: Failed to remove unknown binding: 66,1,1/0:1663955484/1663955486 [ 53.220892][ T5416] tipc: Failed to remove unknown binding: 66,1,1/0:1663955484/1663955486 [ 53.274754][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.316316][ T5428] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 53.340865][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.384728][ T5387] chnl_net:caif_netlink_parms(): no params data found [ 53.394748][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.394918][ T29] audit: type=1326 audit(1756368277.755:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.452168][ T29] audit: type=1326 audit(1756368277.785:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.475623][ T29] audit: type=1326 audit(1756368277.785:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.499347][ T29] audit: type=1326 audit(1756368277.785:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.522967][ T29] audit: type=1326 audit(1756368277.785:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.546448][ T29] audit: type=1326 audit(1756368277.785:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 53.648499][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.655794][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.684820][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 53.692094][ T5387] bridge_slave_0: entered allmulticast mode [ 53.702677][ T5387] bridge_slave_0: entered promiscuous mode [ 53.721154][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.728414][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.740688][ T5387] bridge_slave_1: entered allmulticast mode [ 53.747317][ T5387] bridge_slave_1: entered promiscuous mode [ 53.773646][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 53.782695][ T5304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.792493][ T12] bridge_slave_1: left allmulticast mode [ 53.798198][ T12] bridge_slave_1: left promiscuous mode [ 53.803982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.815209][ T12] bridge_slave_0: left promiscuous mode [ 53.820964][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.910252][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.920749][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.939922][ T12] bond0 (unregistering): Released all slaves [ 53.955477][ T5304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.967786][ T5304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.998615][ T5304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.014910][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.045110][ T12] hsr_slave_0: left promiscuous mode [ 54.068418][ T12] hsr_slave_1: left promiscuous mode [ 54.080518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.088167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.096829][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.104303][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.128374][ T12] veth1_macvtap: left promiscuous mode [ 54.142229][ T12] veth0_macvtap: left promiscuous mode [ 54.148372][ T12] veth1_vlan: left promiscuous mode [ 54.157884][ T12] veth0_vlan: left promiscuous mode [ 54.181271][ T5481] netlink: 80 bytes leftover after parsing attributes in process `syz.2.815'. [ 54.235516][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.247829][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.285243][ T5387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.327330][ T5483] netlink: 272 bytes leftover after parsing attributes in process `syz.0.816'. [ 54.347146][ T5387] team0: Port device team_slave_0 added [ 54.364940][ T5387] team0: Port device team_slave_1 added [ 54.365675][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 54.394702][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.401825][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.428156][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.442262][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.449228][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.475340][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.507704][ T5387] hsr_slave_0: entered promiscuous mode [ 54.513979][ T5387] hsr_slave_1: entered promiscuous mode [ 54.537553][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.592805][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.608407][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.615771][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.626080][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.633180][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.694135][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.784426][ T5304] veth0_vlan: entered promiscuous mode [ 54.792680][ T5304] veth1_vlan: entered promiscuous mode [ 54.806216][ T5304] veth0_macvtap: entered promiscuous mode [ 54.813552][ T5304] veth1_macvtap: entered promiscuous mode [ 54.824360][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.835275][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.846594][ T1642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.856648][ T1642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.870543][ T1642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.879606][ T1642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.899941][ T5387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.909334][ T5387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.919668][ T5387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.928764][ T5387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.964898][ T5517] only policy match revision 0 supported [ 54.964912][ T5517] unable to load match [ 55.000515][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.015998][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.025827][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.033095][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.054274][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.061402][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.130324][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.147680][ T5540] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 55.241193][ T5387] veth0_vlan: entered promiscuous mode [ 55.271469][ T5387] veth1_vlan: entered promiscuous mode [ 55.295486][ T5387] veth0_macvtap: entered promiscuous mode [ 55.305927][ T5387] veth1_macvtap: entered promiscuous mode [ 55.318506][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.330167][ T5550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.331489][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.337574][ T5550] IPv6: NLM_F_CREATE should be set when creating new route [ 55.337586][ T5550] IPv6: NLM_F_CREATE should be set when creating new route [ 55.363643][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.400419][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.429553][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.440222][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.462741][ T5564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 55.532739][ T5570] Illegal XDP return value 4294967289 on prog (id 654) dev N/A, expect packet loss! [ 55.587733][ T5575] wireguard0: entered promiscuous mode [ 55.593504][ T5575] wireguard0: entered allmulticast mode [ 55.606850][ T5578] loop0: detected capacity change from 0 to 512 [ 55.614334][ T5578] msdos: Bad value for 'allow_utime' [ 55.814025][ T5595] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 55.923383][ T5612] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 56.425069][ T5626] loop2: detected capacity change from 0 to 128 [ 56.436784][ T5626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.453344][ T5626] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.465749][ T5632] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 56.559778][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.682868][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.690178][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.722126][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 56.722143][ T29] audit: type=1326 audit(1756368281.075:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.5.866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61c550ebe9 code=0x0 [ 56.771150][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.781012][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.808877][ T5649] vxlan0: left promiscuous mode [ 56.874544][ T5656] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.884473][ T5656] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.907429][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.915960][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.936654][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.945085][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.954685][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.963127][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.278328][ T5663] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.430511][ T29] audit: type=1326 audit(1756368281.785:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.481083][ T29] audit: type=1326 audit(1756368281.815:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.504514][ T29] audit: type=1326 audit(1756368281.815:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.528051][ T29] audit: type=1326 audit(1756368281.825:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.551541][ T29] audit: type=1326 audit(1756368281.825:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.574978][ T29] audit: type=1326 audit(1756368281.825:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61c54aade9 code=0x7ffc0000 [ 57.598409][ T29] audit: type=1326 audit(1756368281.825:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.621864][ T29] audit: type=1326 audit(1756368281.825:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.623017][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119d2ae00: rx timeout, send abort [ 57.645385][ T29] audit: type=1326 audit(1756368281.825:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5673 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c550ebe9 code=0x7ffc0000 [ 57.653603][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119d2ac00: rx timeout, send abort [ 57.653738][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d2ae00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 57.699384][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d2ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 57.764161][ T5683] netlink: 'syz.0.885': attribute type 83 has an invalid length. [ 57.816840][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 58.290834][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 58.571722][ T5697] Set syz1 is full, maxelem 65536 reached [ 58.634668][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 58.874270][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.919'. [ 59.486903][ T5762] Set syz1 is full, maxelem 65536 reached [ 59.933436][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 60.088069][ T5789] ref_ctr_offset mismatch. inode: 0x83 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc0000000a [ 60.314114][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 60.838381][ T5853] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.232139][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 61.364037][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 61.869524][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 61.892093][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 61.901019][ T5977] netlink: 160 bytes leftover after parsing attributes in process `syz.3.998'. [ 62.039314][ T6014] loop2: detected capacity change from 0 to 2048 [ 62.133907][ T6031] 9p: Unknown uid 00000000004294967295 [ 62.403997][ T6088] loop0: detected capacity change from 0 to 128 [ 62.415245][ T6090] loop5: detected capacity change from 0 to 512 [ 62.425855][ T6088] FAT-fs (loop0): Directory bread(block 32) failed [ 62.433168][ T6088] FAT-fs (loop0): Directory bread(block 33) failed [ 62.441791][ T6088] FAT-fs (loop0): Directory bread(block 34) failed [ 62.443011][ T6090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.448563][ T6088] FAT-fs (loop0): Directory bread(block 35) failed [ 62.467684][ T6088] FAT-fs (loop0): Directory bread(block 36) failed [ 62.475208][ T6088] FAT-fs (loop0): Directory bread(block 37) failed [ 62.478971][ T6090] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.481886][ T6088] FAT-fs (loop0): Directory bread(block 38) failed [ 62.498726][ T6088] FAT-fs (loop0): Directory bread(block 39) failed [ 62.505435][ T6088] FAT-fs (loop0): Directory bread(block 40) failed [ 62.512152][ T6088] FAT-fs (loop0): Directory bread(block 41) failed [ 62.522465][ T6090] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.536293][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 62.536313][ T29] audit: type=1400 audit(1756368286.885:2194): avc: denied { mount } for pid=6087 comm="syz.0.1023" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.579241][ T6088] syz.0.1023: attempt to access beyond end of device [ 62.579241][ T6088] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 62.592565][ T6088] Buffer I/O error on dev loop0, logical block 1028, async page read [ 62.606489][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.606726][ T6088] syz.0.1023: attempt to access beyond end of device [ 62.606726][ T6088] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 62.629050][ T6088] Buffer I/O error on dev loop0, logical block 41991, async page read [ 62.637413][ T6088] FAT-fs (loop0): Filesystem has been set read-only [ 62.645196][ T6088] syz.0.1023: attempt to access beyond end of device [ 62.645196][ T6088] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 62.658500][ T6088] Buffer I/O error on dev loop0, logical block 1028, async page read [ 62.667876][ T6088] syz.0.1023: attempt to access beyond end of device [ 62.667876][ T6088] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 62.681421][ T6088] Buffer I/O error on dev loop0, logical block 41991, async page read [ 62.716566][ T29] audit: type=1400 audit(1756368287.075:2195): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.755947][ T29] audit: type=1326 audit(1756368287.105:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 62.779664][ T29] audit: type=1326 audit(1756368287.105:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 62.805522][ T29] audit: type=1326 audit(1756368287.105:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 62.828998][ T29] audit: type=1326 audit(1756368287.105:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 62.852617][ T29] audit: type=1326 audit(1756368287.105:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 62.912869][ T29] audit: type=1400 audit(1756368287.265:2201): avc: denied { ioctl } for pid=6116 comm="syz.2.1035" path="socket:[14818]" dev="sockfs" ino=14818 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.267773][ T29] audit: type=1326 audit(1756368287.625:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 63.291482][ T29] audit: type=1326 audit(1756368287.645:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 63.323498][ T6171] __nla_validate_parse: 5 callbacks suppressed [ 63.323513][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 63.382413][ T6179] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1063'. [ 63.404109][ T6179] 0{X: renamed from 31{X (while UP) [ 63.413049][ T6179] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 63.520943][ T6200] netem: change failed [ 63.858433][ T6247] loop2: detected capacity change from 0 to 2048 [ 63.911560][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.936918][ T6247] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.986985][ T6247] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1094: bg 0: block 345: padding at end of block bitmap is not set [ 64.056276][ T6247] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 64.068987][ T6247] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.068987][ T6247] [ 64.119116][ T6265] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 64.131646][ T6265] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.131646][ T6265] [ 64.142864][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 64.152212][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 64.190763][ T6272] loop0: detected capacity change from 0 to 256 [ 64.208110][ T587] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 117 [ 64.220619][ T587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.220619][ T587] [ 64.237143][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.331323][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 64.340377][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 64.932390][ T6303] loop5: detected capacity change from 0 to 128 [ 65.023852][ T6315] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 65.074705][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.147046][ T6322] bond1: entered promiscuous mode [ 65.152227][ T6322] bond1: entered allmulticast mode [ 65.158571][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.182516][ T6322] bond1 (unregistering): Released all slaves [ 65.300815][ T6344] loop0: detected capacity change from 0 to 512 [ 65.319436][ T6346] tipc: Failed to remove unknown binding: 66,1,1/0:4202344486/4202344488 [ 65.327959][ T6346] tipc: Failed to remove unknown binding: 66,1,1/0:4202344486/4202344488 [ 65.365531][ T6344] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.413320][ T6344] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.425177][ T6344] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1137: Failed to acquire dquot type 1 [ 65.466532][ T6356] loop2: detected capacity change from 0 to 164 [ 65.503256][ T6344] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1137: bg 0: block 40: padding at end of block bitmap is not set [ 65.539941][ T6356] rock: directory entry would overflow storage [ 65.546202][ T6356] rock: sig=0x66, size=4, remaining=3 [ 65.557203][ T6344] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 65.590412][ T6344] EXT4-fs (loop0): 1 truncate cleaned up [ 65.597772][ T6344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.636524][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.786985][ T6390] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1157'. [ 65.922787][ T6410] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1164'. [ 66.093901][ T6421] tipc: Failed to remove unknown binding: 66,1,1/0:181839078/181839080 [ 66.102318][ T6421] tipc: Failed to remove unknown binding: 66,1,1/0:181839078/181839080 [ 66.130480][ T3405] IPVS: starting estimator thread 0... [ 66.158195][ T6429] loop3: detected capacity change from 0 to 1024 [ 66.166938][ T6429] EXT4-fs: Ignoring removed oldalloc option [ 66.173840][ T6429] EXT4-fs: Ignoring removed orlov option [ 66.185719][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.222182][ T6427] IPVS: using max 2928 ests per chain, 146400 per kthread [ 66.286925][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.623616][ T6479] loop2: detected capacity change from 0 to 128 [ 66.633094][ T6479] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 66.748468][ T6489] tipc: Started in network mode [ 66.753484][ T6489] tipc: Node identity 4645dbbc6e6e, cluster identity 4711 [ 66.760721][ T6489] tipc: Enabled bearer , priority 0 [ 66.811745][ T6494] tipc: Disabling bearer [ 67.019256][ T6519] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 67.097463][ T6525] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1214'. [ 67.150807][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.159454][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.213165][ T6549] pimreg: entered allmulticast mode [ 67.223262][ T6549] pimreg: left allmulticast mode [ 67.310340][ T6546] loop2: detected capacity change from 0 to 32768 [ 67.323540][ T6553] tipc: Failed to remove unknown binding: 66,1,1/0:3440455028/3440455030 [ 67.332393][ T6553] tipc: Failed to remove unknown binding: 66,1,1/0:3440455028/3440455030 [ 67.725644][ T6611] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 67.739464][ T6611] batman_adv: batadv0: Adding interface: ip6gretap1 [ 67.746227][ T6611] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.778149][ T6611] batman_adv: batadv0: Interface activated: ip6gretap1 [ 67.988594][ T6647] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 68.270629][ T6699] loop5: detected capacity change from 0 to 128 [ 68.299914][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 68.299974][ T29] audit: type=1326 audit(1756368292.655:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.329876][ T29] audit: type=1326 audit(1756368292.655:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.353431][ T29] audit: type=1326 audit(1756368292.655:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.377031][ T29] audit: type=1326 audit(1756368292.655:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.400519][ T29] audit: type=1326 audit(1756368292.655:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.423961][ T29] audit: type=1326 audit(1756368292.655:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fcbbebe9 code=0x7ffc0000 [ 68.540257][ T6729] 0{X: left allmulticast mode [ 68.674961][ T6736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.712302][ T6743] loop2: detected capacity change from 0 to 512 [ 68.722078][ T1642] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.730678][ T1642] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.741828][ T1642] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.762847][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.792569][ T6743] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.825986][ T29] audit: type=1400 audit(1756368293.185:2783): avc: denied { setattr } for pid=6742 comm="syz.2.1268" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.875107][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.904183][ T6761] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1275'. [ 68.913104][ T29] audit: type=1326 audit(1756368293.265:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 68.913657][ T6761] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1275'. [ 69.094889][ T29] audit: type=1326 audit(1756368293.315:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 69.118558][ T29] audit: type=1326 audit(1756368293.315:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 69.277887][ T6801] loop2: detected capacity change from 0 to 512 [ 69.295548][ T6801] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1284: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.315059][ T6801] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.1284: Bad quota inode: 3, type: 0 [ 69.326883][ T6801] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.342799][ T6801] EXT4-fs (loop2): mount failed [ 69.400317][ T6825] IPVS: Error connecting to the multicast addr [ 69.811740][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 69.838123][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 69.932349][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1305'. [ 69.953658][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 69.964528][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 69.973827][ T6919] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1304'. [ 70.176813][ T6954] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1320'. [ 70.303401][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 70.621649][ T7010] loop5: detected capacity change from 0 to 1024 [ 70.628687][ T7010] EXT4-fs: Ignoring removed oldalloc option [ 70.635847][ T7010] EXT4-fs: Ignoring removed orlov option [ 70.663020][ T7010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.714511][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.771226][ T7024] netlink: 'syz.5.1348': attribute type 3 has an invalid length. [ 70.779074][ T7024] netlink: 'syz.5.1348': attribute type 1 has an invalid length. [ 70.921117][ T7037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.928857][ T7037] team0: Port device bond1 added [ 71.428288][ T7081] loop0: detected capacity change from 0 to 2048 [ 71.568802][ T7101] loop0: detected capacity change from 0 to 2048 [ 72.205293][ T7208] loop2: detected capacity change from 0 to 1024 [ 72.218588][ T7208] EXT4-fs: Ignoring removed oldalloc option [ 72.243764][ T7208] EXT4-fs: Ignoring removed orlov option [ 72.285065][ T7208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.306906][ T7219] bridge0: entered promiscuous mode [ 72.312472][ T7219] macsec1: entered promiscuous mode [ 72.318051][ T7219] bridge0: port 1(macsec1) entered blocking state [ 72.324695][ T7219] bridge0: port 1(macsec1) entered disabled state [ 72.333343][ T7219] macsec1: entered allmulticast mode [ 72.338657][ T7219] bridge0: entered allmulticast mode [ 72.344493][ T7219] macsec1: left allmulticast mode [ 72.349608][ T7219] bridge0: left allmulticast mode [ 72.356318][ T7219] bridge0: left promiscuous mode [ 72.441753][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.693471][ T7243] netem: change failed [ 72.941414][ T7268] loop3: detected capacity change from 0 to 512 [ 72.971843][ T7268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.023833][ T7268] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.084498][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.143043][ T7286] loop0: detected capacity change from 0 to 2048 [ 73.165419][ T7295] SELinux: security policydb version 17 (MLS) not backwards compatible [ 73.194949][ T7292] loop3: detected capacity change from 0 to 512 [ 73.208291][ T7295] SELinux: failed to load policy [ 73.208898][ T7286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.229069][ T7292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.269424][ T7286] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.286261][ T7292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.305675][ T7286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1416: bg 0: block 345: padding at end of block bitmap is not set [ 73.311634][ T7292] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.340971][ T7286] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 73.353553][ T7286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.353553][ T7286] [ 73.372111][ T7292] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1418: corrupted xattr block 19: overlapping e_value [ 73.372186][ T7286] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 73.372213][ T7286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.372213][ T7286] [ 73.389848][ T7292] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 73.418699][ T7292] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1418: corrupted xattr block 19: overlapping e_value [ 73.433544][ T7292] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 73.442968][ T7292] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1418: corrupted xattr block 19: overlapping e_value [ 73.442981][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 73.442997][ T29] audit: type=1400 audit(1756368297.805:3044): avc: denied { setattr } for pid=7291 comm="syz.3.1418" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.487680][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 117 [ 73.500215][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.500215][ T31] [ 73.591396][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.626388][ T29] audit: type=1400 audit(1756368297.985:3045): avc: denied { connect } for pid=7332 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.684641][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.708291][ T29] audit: type=1400 audit(1756368298.035:3046): avc: denied { bind } for pid=7356 comm="syz.1.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.839652][ T29] audit: type=1400 audit(1756368298.195:3047): avc: denied { write } for pid=7368 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.920855][ T29] audit: type=1400 audit(1756368298.265:3048): avc: denied { create } for pid=7371 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.940512][ T29] audit: type=1400 audit(1756368298.265:3049): avc: denied { watch watch_reads } for pid=7372 comm="syz.0.1436" path="/255" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.963637][ T29] audit: type=1400 audit(1756368298.275:3050): avc: denied { write } for pid=7371 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.024533][ T7381] __nla_validate_parse: 9 callbacks suppressed [ 74.024553][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 74.039797][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 74.103315][ T7386] SELinux: ebitmap: truncated map [ 74.118555][ T7386] SELinux: failed to load policy [ 74.121662][ T7395] loop2: detected capacity change from 0 to 1024 [ 74.148267][ T7395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.188307][ T29] audit: type=1400 audit(1756368298.535:3051): avc: denied { getopt } for pid=7403 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.208035][ T29] audit: type=1326 audit(1756368298.545:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 74.231512][ T29] audit: type=1326 audit(1756368298.545:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 74.256987][ T7399] loop3: detected capacity change from 0 to 1024 [ 74.295199][ T7399] EXT4-fs: Ignoring removed nobh option [ 74.300826][ T7399] EXT4-fs: Ignoring removed bh option [ 74.302746][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.358610][ T7399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.396832][ T7399] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.418545][ T7423] futex_wake_op: syz.2.1458 tries to shift op by -1; fix this program [ 74.521846][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.529182][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.584057][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.635918][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.645911][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.739919][ T7463] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1464'. [ 74.771450][ T7425] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 74.801255][ T7434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.877043][ T1605] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.895953][ T1605] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.911265][ T1605] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.990838][ T7484] bridge0: entered promiscuous mode [ 74.996949][ T7484] macsec1: entered promiscuous mode [ 75.004277][ T7484] bridge0: port 3(macsec1) entered blocking state [ 75.010777][ T7484] bridge0: port 3(macsec1) entered disabled state [ 75.019579][ T7484] macsec1: entered allmulticast mode [ 75.024950][ T7484] bridge0: entered allmulticast mode [ 75.031913][ T7484] macsec1: left allmulticast mode [ 75.037199][ T7484] bridge0: left allmulticast mode [ 75.039089][ T7488] loop2: detected capacity change from 0 to 1024 [ 75.043050][ T7446] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 75.050611][ T7488] EXT4-fs: Ignoring removed nobh option [ 75.056465][ T7446] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 75.063268][ T7488] EXT4-fs: Ignoring removed bh option [ 75.070173][ T7446] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 75.076264][ T7484] bridge0: left promiscuous mode [ 75.084127][ T7446] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.100105][ T7488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.116026][ T7488] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.133744][ T7493] loop0: detected capacity change from 0 to 128 [ 75.141839][ T7493] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.154453][ T7493] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.174089][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.238294][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.285201][ T7509] loop0: detected capacity change from 0 to 512 [ 75.294879][ T7509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.325159][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.343502][ T7509] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.360964][ T7509] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1483: corrupted xattr block 19: overlapping e_value [ 75.381046][ T7509] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 75.391696][ T7509] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1483: corrupted xattr block 19: overlapping e_value [ 75.406726][ T7509] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 75.416005][ T7509] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1483: corrupted xattr block 19: overlapping e_value [ 75.467871][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540997][ T7538] tipc: Started in network mode [ 75.545998][ T7538] tipc: Node identity 224eb109ff8a, cluster identity 4711 [ 75.553425][ T7538] tipc: Enabled bearer , priority 0 [ 75.561846][ T7538] tipc: Disabling bearer [ 75.773382][ T7563] loop3: detected capacity change from 0 to 2048 [ 75.804966][ T7565] loop0: detected capacity change from 0 to 1024 [ 75.812171][ T7565] EXT4-fs: Ignoring removed nobh option [ 75.812446][ T7567] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1509'. [ 75.817915][ T7565] EXT4-fs: Ignoring removed bh option [ 75.844310][ T7565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.857397][ T7565] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.959534][ T7580] loop3: detected capacity change from 0 to 1024 [ 75.967375][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.988068][ T7580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.000629][ T7580] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.016564][ T7580] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1514: lblock 3 mapped to illegal pblock 3 (length 3) [ 76.026461][ T7592] loop0: detected capacity change from 0 to 1024 [ 76.032354][ T7580] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 76.038111][ T7592] EXT4-fs: Ignoring removed oldalloc option [ 76.049601][ T7580] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.049601][ T7580] [ 76.069311][ T7592] EXT4-fs: Ignoring removed orlov option [ 76.083633][ T7592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.112012][ T41] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.126820][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.139190][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.139190][ T41] [ 76.150907][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.162400][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.197430][ T7603] loop3: detected capacity change from 0 to 512 [ 76.214026][ T7603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.227742][ T7603] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.246428][ T7603] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1533: Failed to acquire dquot type 0 [ 76.271834][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.299080][ T7612] loop0: detected capacity change from 0 to 512 [ 76.391275][ T7616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1527'. [ 76.604359][ T7620] loop3: detected capacity change from 0 to 32768 [ 77.234206][ T7637] loop5: detected capacity change from 0 to 2048 [ 77.245917][ T7645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 77.256210][ T7643] loop0: detected capacity change from 0 to 1024 [ 77.263173][ T7643] EXT4-fs: Ignoring removed bh option [ 77.269963][ T7645] batman_adv: batadv0: Adding interface: ip6gretap1 [ 77.276666][ T7645] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.303745][ T7645] batman_adv: batadv0: Interface activated: ip6gretap1 [ 77.318289][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.342962][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.404641][ T7663] serio: Serial port ptm0 [ 78.098710][ T7779] loop3: detected capacity change from 0 to 128 [ 78.235093][ T7802] loop0: detected capacity change from 0 to 512 [ 78.267390][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.304286][ T7802] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.391185][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.459903][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 78.459919][ T29] audit: type=1400 audit(1756368302.815:3194): avc: denied { create } for pid=7837 comm="syz.0.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.486989][ T7838] IPVS: Error connecting to the multicast addr [ 78.509985][ T29] audit: type=1400 audit(1756368302.845:3195): avc: denied { setopt } for pid=7837 comm="syz.0.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.532681][ T29] audit: type=1400 audit(1756368302.885:3196): avc: denied { name_bind } for pid=7841 comm="syz.0.1578" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.585936][ T7844] loop5: detected capacity change from 0 to 512 [ 78.632969][ T7844] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.697268][ T7850] macsec1: entered promiscuous mode [ 78.702583][ T7850] bridge0: entered promiscuous mode [ 78.708596][ T7844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.721811][ T7844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.742306][ T7850] bridge0: port 1(macsec1) entered blocking state [ 78.748816][ T7850] bridge0: port 1(macsec1) entered disabled state [ 78.765934][ T7850] macsec1: entered allmulticast mode [ 78.771466][ T7850] bridge0: entered allmulticast mode [ 78.778635][ T7844] EXT4-fs (loop5): 1 truncate cleaned up [ 78.788933][ T29] audit: type=1400 audit(1756368303.125:3197): avc: denied { setopt } for pid=7853 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.789977][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.820987][ T7850] macsec1: left allmulticast mode [ 78.826078][ T7850] bridge0: left allmulticast mode [ 78.829408][ T29] audit: type=1400 audit(1756368303.185:3198): avc: denied { read } for pid=7853 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.860857][ T7850] bridge0: left promiscuous mode [ 78.876039][ T29] audit: type=1326 audit(1756368303.215:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 78.899675][ T29] audit: type=1326 audit(1756368303.215:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 78.923154][ T29] audit: type=1326 audit(1756368303.215:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 78.946855][ T29] audit: type=1326 audit(1756368303.215:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 78.970555][ T29] audit: type=1326 audit(1756368303.215:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 78.994439][ T7852] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1582'. [ 79.079585][ T7874] loop2: detected capacity change from 0 to 1024 [ 79.100581][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.252876][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.273066][ T7890] bridge0: entered promiscuous mode [ 79.278490][ T7890] macvtap1: entered allmulticast mode [ 79.283999][ T7890] bridge0: entered allmulticast mode [ 79.296479][ T7890] bridge0: port 1(macvtap1) entered blocking state [ 79.303158][ T7890] bridge0: port 1(macvtap1) entered disabled state [ 79.312447][ T7890] bridge0: left allmulticast mode [ 79.317622][ T7890] bridge0: left promiscuous mode [ 79.423202][ T7901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.520656][ T7901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.528000][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.594926][ T7901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.611058][ T7912] macsec1: entered promiscuous mode [ 79.616442][ T7912] bridge0: entered promiscuous mode [ 79.628802][ T7912] bridge0: port 3(macsec1) entered blocking state [ 79.635464][ T7912] bridge0: port 3(macsec1) entered disabled state [ 79.642301][ T7912] macsec1: entered allmulticast mode [ 79.644537][ T7914] loop0: detected capacity change from 0 to 4096 [ 79.647619][ T7912] bridge0: entered allmulticast mode [ 79.659879][ T7912] macsec1: left allmulticast mode [ 79.664951][ T7912] bridge0: left allmulticast mode [ 79.666197][ T7914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.682849][ T7912] bridge0: left promiscuous mode [ 79.711833][ T7901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.729256][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.754987][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 79.766289][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 79.810879][ T7349] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.834280][ T7349] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.866644][ T7349] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.882892][ T7349] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935018][ T7938] loop3: detected capacity change from 0 to 512 [ 79.955670][ T7938] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.963437][ T7938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.974834][ T7938] EXT4-fs (loop3): 1 truncate cleaned up [ 79.980957][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.140679][ T7946] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1619'. [ 80.251365][ T7951] atomic_op ffff88811e40a128 conn xmit_atomic 0000000000000000 [ 80.311555][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 80.354304][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 80.437518][ T7960] macsec1: entered promiscuous mode [ 80.442846][ T7960] bridge0: entered promiscuous mode [ 80.462900][ T7960] bridge0: port 3(macsec1) entered blocking state [ 80.469451][ T7960] bridge0: port 3(macsec1) entered disabled state [ 80.503039][ T7960] macsec1: entered allmulticast mode [ 80.506180][ T7966] loop5: detected capacity change from 0 to 512 [ 80.508394][ T7960] bridge0: entered allmulticast mode [ 80.528336][ T7960] macsec1: left allmulticast mode [ 80.533477][ T7960] bridge0: left allmulticast mode [ 80.540387][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.554338][ T7966] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.565235][ T7960] bridge0: left promiscuous mode [ 80.585344][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.639584][ T7973] loop5: detected capacity change from 0 to 1024 [ 80.677955][ T7973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.700710][ T7973] EXT4-fs: Ignoring sb option on remount [ 80.706467][ T7973] EXT4-fs: Ignoring removed orlov option [ 80.712305][ T7973] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 80.722468][ T7973] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.748395][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.785453][ T7983] loop5: detected capacity change from 0 to 1024 [ 80.798442][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 80.808410][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 80.818995][ T7983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.870822][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.913392][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.952794][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 80.959806][ T8003] loop0: detected capacity change from 0 to 2048 [ 80.961705][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 81.001051][ T8003] loop0: p1 < > p4 [ 81.005927][ T8003] loop0: p4 size 8388608 extends beyond EOD, truncated [ 81.041241][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1644'. [ 81.550800][ T8052] loop5: detected capacity change from 0 to 512 [ 81.595786][ T8052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.613082][ T8052] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.771559][ T8046] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 81.793324][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.170906][ T8084] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.223201][ T8087] loop2: detected capacity change from 0 to 4096 [ 82.233666][ T8087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.253412][ T8084] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.287089][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.339765][ T8084] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.381259][ T8112] loop2: detected capacity change from 0 to 128 [ 82.394229][ T8084] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.407581][ T8112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.443150][ T8112] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.470787][ T6081] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.513492][ T6081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.536133][ T6081] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.579200][ T6081] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.606422][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.645030][ T8135] netlink: 'syz.0.1700': attribute type 6 has an invalid length. [ 82.660358][ T8135] netlink: 'syz.0.1700': attribute type 6 has an invalid length. [ 82.759835][ T8151] loop0: detected capacity change from 0 to 512 [ 82.795435][ T8151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.814145][ T8151] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.996521][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.034849][ T8186] loop0: detected capacity change from 0 to 256 [ 83.143087][ T8201] loop0: detected capacity change from 0 to 128 [ 83.174268][ T8201] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.228294][ T8201] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.292913][ T8216] vhci_hcd: invalid port number 96 [ 83.298161][ T8216] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 83.518750][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.526074][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.563697][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.609251][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.624399][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.694089][ T6081] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.727191][ T6081] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.755048][ T8248] futex_wake_op: syz.0.1736 tries to shift op by -1; fix this program [ 83.792413][ T8231] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.853433][ T6081] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.864827][ T8252] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.885695][ T8255] loop2: detected capacity change from 0 to 512 [ 83.904999][ T8255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.917785][ T8255] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.930551][ T8252] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.943966][ T8255] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1741: corrupted inode contents [ 83.958618][ T8255] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1741: mark_inode_dirty error [ 83.970219][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 83.970236][ T29] audit: type=1400 audit(1756368308.325:3328): avc: denied { cpu } for pid=8259 comm="syz.0.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.979047][ T8255] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1741: corrupted inode contents [ 84.008370][ T29] audit: type=1400 audit(1756368308.365:3329): avc: denied { create } for pid=8254 comm="syz.2.1741" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.009380][ T8261] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1741: corrupted inode contents [ 84.040672][ T8261] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1741: mark_inode_dirty error [ 84.053137][ T8261] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1741: corrupted inode contents [ 84.066042][ T8252] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.076851][ T8261] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1741: mark_inode_dirty error [ 84.095702][ T8261] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1741: corrupted inode contents [ 84.110245][ T8261] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1741: mark_inode_dirty error [ 84.123468][ T8252] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.175924][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.328561][ T29] audit: type=1326 audit(1756368308.685:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7fc00000 [ 84.376358][ T8287] loop2: detected capacity change from 0 to 128 [ 84.384186][ T8287] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.397235][ T8287] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.409814][ T29] audit: type=1400 audit(1756368308.765:3331): avc: denied { append } for pid=8286 comm="syz.2.1754" path="/412/mnt/pids.current" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.441181][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.547595][ T29] audit: type=1400 audit(1756368308.905:3332): avc: denied { lock } for pid=8302 comm="syz.2.1759" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.054989][ T29] audit: type=1326 audit(1756368309.415:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d025ebe9 code=0x7fc00000 [ 85.120433][ T29] audit: type=1326 audit(1756368309.475:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 85.157700][ T29] audit: type=1326 audit(1756368309.505:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 85.181443][ T29] audit: type=1326 audit(1756368309.505:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 85.205044][ T29] audit: type=1326 audit(1756368309.505:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 85.460280][ T8358] loop5: detected capacity change from 0 to 128 [ 85.487886][ T8358] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.489817][ T8365] loop0: detected capacity change from 0 to 256 [ 85.506669][ T8358] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.523426][ T8365] program syz.0.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.550220][ T8369] wg2: entered promiscuous mode [ 85.555274][ T8369] wg2: entered allmulticast mode [ 85.572414][ T5304] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.631464][ T8381] netlink: 'syz.5.1795': attribute type 30 has an invalid length. [ 85.767262][ T8387] ip6gre1: entered allmulticast mode [ 86.269477][ T8397] loop3: detected capacity change from 0 to 128 [ 86.282119][ T8397] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.325153][ T8409] program syz.2.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.334679][ T8409] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.345231][ T8411] netlink: 'syz.5.1807': attribute type 3 has an invalid length. [ 86.392792][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.418668][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.433218][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.441555][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489657][ T8425] pim6reg: entered allmulticast mode [ 86.524577][ T8425] pim6reg: left allmulticast mode [ 86.817554][ T8469] loop2: detected capacity change from 0 to 164 [ 86.828455][ T8469] syz.2.1836: attempt to access beyond end of device [ 86.828455][ T8469] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.882534][ T8469] syz.2.1836: attempt to access beyond end of device [ 86.882534][ T8469] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.959467][ T8477] loop3: detected capacity change from 0 to 128 [ 87.029909][ T8481] loop2: detected capacity change from 0 to 512 [ 87.041327][ T8481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.063918][ T8481] EXT4-fs (loop2): 1 truncate cleaned up [ 87.175037][ T8489] EXT4-fs (loop2): shut down requested (0) [ 87.277008][ T8498] lo speed is unknown, defaulting to 1000 [ 87.283124][ T8498] lo speed is unknown, defaulting to 1000 [ 87.289411][ T8498] lo speed is unknown, defaulting to 1000 [ 87.328183][ T8498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.372648][ T8498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.406423][ T8501] lo speed is unknown, defaulting to 1000 [ 87.448161][ T8498] lo speed is unknown, defaulting to 1000 [ 87.459724][ T8498] lo speed is unknown, defaulting to 1000 [ 87.467783][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 87.479970][ T8498] lo speed is unknown, defaulting to 1000 [ 87.531337][ T8498] lo speed is unknown, defaulting to 1000 [ 87.571596][ T8498] lo speed is unknown, defaulting to 1000 [ 87.585043][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.592203][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.615918][ T8512] loop2: detected capacity change from 0 to 8192 [ 87.622810][ T8512] msdos: Unknown parameter 'A' [ 87.632501][ T8485] bridge_slave_0: entered allmulticast mode [ 87.639064][ T8485] bridge_slave_0: entered promiscuous mode [ 87.645928][ T8498] lo speed is unknown, defaulting to 1000 [ 87.651110][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.658769][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.666513][ T8485] bridge_slave_1: entered allmulticast mode [ 87.682431][ T8485] bridge_slave_1: entered promiscuous mode [ 87.710184][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.720868][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.753279][ T8485] team0: Port device team_slave_0 added [ 87.768951][ T8485] team0: Port device team_slave_1 added [ 87.786469][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.793512][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.819611][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.831314][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.838294][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.864409][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.889784][ T8485] hsr_slave_0: entered promiscuous mode [ 87.895863][ T8485] hsr_slave_1: entered promiscuous mode [ 87.901798][ T8485] debugfs: 'hsr0' already exists in 'hsr' [ 87.907541][ T8485] Cannot create hsr debugfs directory [ 87.961553][ T8485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 87.970210][ T8485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 87.978653][ T8485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.987001][ T8485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.017589][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.031306][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.041565][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.048633][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.059498][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.066821][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.119508][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.201569][ T8485] veth0_vlan: entered promiscuous mode [ 88.209652][ T8485] veth1_vlan: entered promiscuous mode [ 88.223348][ T8485] veth0_macvtap: entered promiscuous mode [ 88.230490][ T8485] veth1_macvtap: entered promiscuous mode [ 88.241467][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.253516][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.264030][ T7349] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.275226][ T7349] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.286365][ T7349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.297345][ T7349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.358482][ T8554] loop2: detected capacity change from 0 to 1024 [ 88.384482][ T8547] loop0: detected capacity change from 0 to 8192 [ 88.393099][ T8557] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.424437][ T8557] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.485645][ T8557] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.538065][ T8557] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.706458][ T8587] __nla_validate_parse: 11 callbacks suppressed [ 88.706477][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 89.038100][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 89.057034][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 89.148882][ T31] bridge_slave_1: left allmulticast mode [ 89.154992][ T31] bridge_slave_1: left promiscuous mode [ 89.160795][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.170517][ T31] bridge_slave_0: left allmulticast mode [ 89.176762][ T31] bridge_slave_0: left promiscuous mode [ 89.182473][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.196742][ T31] batman_adv: batadv0: Removing interface: ip6gretap1 [ 89.291198][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 89.291213][ T29] audit: type=1400 audit(1756368313.645:3496): avc: denied { getopt } for pid=8615 comm="syz.2.1884" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.338469][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 89.350253][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.359868][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.370217][ T31] bond0 (unregistering): Released all slaves [ 89.384983][ T31] bond1 (unregistering): Released all slaves [ 89.403976][ T29] audit: type=1400 audit(1756368313.765:3497): avc: denied { write } for pid=8623 comm="syz.2.1888" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.409837][ T8618] team1: entered promiscuous mode [ 89.432278][ T8618] team1: entered allmulticast mode [ 89.448694][ T31] tipc: Left network mode [ 89.460352][ T31] hsr_slave_0: left promiscuous mode [ 89.467214][ T31] hsr_slave_1: left promiscuous mode [ 89.473234][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.481925][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.483109][ T8627] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.521453][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 89.529160][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.536698][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.544163][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.551578][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.559051][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.566507][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.566602][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 89.573937][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.573964][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.574041][ T7467] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.606327][ T7467] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.638861][ T31] team0 (unregistering): Port device team_slave_1 removed [ 89.649225][ T29] audit: type=1326 audit(1756368314.005:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.672958][ T29] audit: type=1326 audit(1756368314.005:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.707501][ T29] audit: type=1326 audit(1756368314.005:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.731405][ T29] audit: type=1326 audit(1756368314.005:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.731680][ T31] team0 (unregistering): Port device team_slave_0 removed [ 89.754994][ T29] audit: type=1326 audit(1756368314.005:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.785932][ T29] audit: type=1326 audit(1756368314.005:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.809511][ T29] audit: type=1326 audit(1756368314.005:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.832996][ T29] audit: type=1326 audit(1756368314.005:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9a3bebe9 code=0x7ffc0000 [ 89.911773][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'. [ 90.506985][ T8690] rdma_op ffff88811e408180 conn xmit_rdma 0000000000000000 [ 90.556262][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.568265][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583713][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.609143][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610736][ T8706] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 90.792279][ T8733] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.843809][ T8733] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.913690][ T8733] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.969878][ T8755] loop3: detected capacity change from 0 to 2048 [ 90.978028][ T8733] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.012305][ T8762] syzkaller1: entered promiscuous mode [ 91.017894][ T8762] syzkaller1: entered allmulticast mode [ 91.034516][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 91.068064][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1947'. [ 91.260735][ T8795] loop9: detected capacity change from 0 to 7 [ 91.267167][ T8795] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.275033][ T8795] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.283155][ T8795] loop9: unable to read partition table [ 91.288996][ T8795] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 91.288996][ T8795] ) failed (rc=-5) [ 91.414301][ T8807] loop3: detected capacity change from 0 to 512 [ 91.421450][ T8807] EXT4-fs: Ignoring removed oldalloc option [ 91.458734][ T8807] EXT4-fs (loop3): 1 truncate cleaned up [ 91.762045][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 91.771268][ T8834] bridge_slave_1: left allmulticast mode [ 91.777127][ T8834] bridge_slave_1: left promiscuous mode [ 91.782953][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.796737][ T8834] bridge_slave_0: left allmulticast mode [ 91.802591][ T8834] bridge_slave_0: left promiscuous mode [ 91.808432][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.089484][ T8871] netlink: 'syz.0.1991': attribute type 39 has an invalid length. [ 92.164490][ T8873] vhci_hcd: invalid port number 96 [ 92.169793][ T8873] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 92.270060][ T8881] loop0: detected capacity change from 0 to 512 [ 92.284464][ T8881] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.299994][ T8881] EXT4-fs (loop0): mount failed [ 92.326115][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'. [ 92.427059][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.439374][ T8897] vlan2: entered allmulticast mode [ 92.444617][ T8897] bond0: entered allmulticast mode [ 92.640769][ T8921] loop3: detected capacity change from 0 to 512 [ 92.664961][ T8921] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.688656][ T8921] EXT4-fs (loop3): mount failed [ 92.696514][ T8928] loop0: detected capacity change from 0 to 512 [ 92.720428][ T8928] ext4 filesystem being mounted at /375/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.361151][ T8960] vlan2: entered allmulticast mode [ 93.366329][ T8960] dummy0: entered allmulticast mode [ 93.435571][ T8963] 0{X: left allmulticast mode [ 93.612834][ T8963] wireguard0: left promiscuous mode [ 93.618215][ T8963] wireguard0: left allmulticast mode [ 93.628604][ T8963] team1: left promiscuous mode [ 93.633597][ T8963] team1: left allmulticast mode [ 93.643848][ T8970] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.674175][ T8981] loop2: detected capacity change from 0 to 256 [ 93.694263][ T8971] pim6reg1: entered promiscuous mode [ 93.699630][ T8971] pim6reg1: entered allmulticast mode [ 93.724895][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.733398][ T8979] bridge0: port 1(team0) entered blocking state [ 93.739677][ T8979] bridge0: port 1(team0) entered disabled state [ 93.746454][ T8979] team0: entered allmulticast mode [ 93.754944][ T8979] team0: entered promiscuous mode [ 93.760950][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.770082][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.829003][ T8991] bridge2: entered allmulticast mode [ 94.026238][ T9005] IPVS: Error connecting to the multicast addr [ 94.070825][ T9011] __nla_validate_parse: 4 callbacks suppressed [ 94.070840][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 94.092486][ T9011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.109419][ T9011] vlan2: entered allmulticast mode [ 94.114695][ T9011] bond1: entered allmulticast mode [ 94.144890][ T6081] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.153840][ T9020] netlink: 'syz.3.2047': attribute type 2 has an invalid length. [ 94.161616][ T9020] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 94.163429][ T6081] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.169537][ T9020] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2047'. [ 94.200085][ T6081] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.217042][ T6081] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.244717][ T9028] loop2: detected capacity change from 0 to 512 [ 94.267673][ T9028] ext4 filesystem being mounted at /520/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.270631][ T9036] loop3: detected capacity change from 0 to 256 [ 94.279748][ T9034] 9pnet_fd: Insufficient options for proto=fd [ 94.316403][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2052'. [ 94.344929][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 94.344946][ T29] audit: type=1326 audit(1756368318.705:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.377296][ T29] audit: type=1326 audit(1756368318.735:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.400847][ T29] audit: type=1326 audit(1756368318.735:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.424668][ T29] audit: type=1326 audit(1756368318.735:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.448345][ T29] audit: type=1326 audit(1756368318.735:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.472296][ T29] audit: type=1326 audit(1756368318.735:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.496426][ T29] audit: type=1326 audit(1756368318.735:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.526400][ T29] audit: type=1326 audit(1756368318.765:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.549925][ T29] audit: type=1326 audit(1756368318.835:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.573571][ T29] audit: type=1326 audit(1756368318.835:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.3.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 94.644042][ T9054] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2058'. [ 94.691243][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2059'. [ 94.763271][ T9067] loop6: detected capacity change from 0 to 256 [ 94.777566][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 94.828383][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2068'. [ 94.856187][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2071'. [ 94.871563][ T9078] vlan2: entered allmulticast mode [ 94.876845][ T9078] veth0_to_team: entered allmulticast mode [ 94.933882][ T9085] loop2: detected capacity change from 0 to 512 [ 94.944733][ T9085] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.959868][ T9085] EXT4-fs (loop2): mount failed [ 94.999685][ T9092] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.2076'. [ 95.129673][ T9105] loop0: detected capacity change from 0 to 256 [ 95.190702][ T9110] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.253682][ T9110] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.338847][ T9110] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.362979][ T9126] loop3: detected capacity change from 0 to 512 [ 95.370538][ T9126] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 4 in block_group 0 [ 95.385456][ T9126] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.453318][ T9110] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.498502][ T9133] loop3: detected capacity change from 0 to 512 [ 95.514116][ T9133] ext4 filesystem being mounted at /269/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.135028][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2094'. [ 96.186049][ T9152] netlink: 'syz.2.2097': attribute type 6 has an invalid length. [ 96.196283][ T9152] netlink: 'syz.2.2097': attribute type 6 has an invalid length. [ 96.207948][ T9154] loop3: detected capacity change from 0 to 512 [ 96.225888][ T9154] ext4 filesystem being mounted at /275/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.274524][ T9164] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 96.282408][ T9164] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 96.307104][ T9166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.323704][ T9166] vlan0: entered allmulticast mode [ 96.328960][ T9166] bond1: entered allmulticast mode [ 96.538645][ T9187] netlink: 'syz.2.2108': attribute type 39 has an invalid length. [ 96.561058][ T9189] futex_wake_op: syz.1.2110 tries to shift op by -1; fix this program [ 96.594096][ T9193] vlan2: entered allmulticast mode [ 96.599565][ T9193] dummy0: entered allmulticast mode [ 96.694456][ T9211] loop0: detected capacity change from 0 to 128 [ 96.701223][ T9211] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 96.741394][ T3305] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 96.749444][ T3305] FAT-fs (loop0): Filesystem has been set read-only [ 96.756865][ T3305] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 98.126769][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.137081][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.147393][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.158353][ T6081] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.196509][ T9222] futex_wake_op: syz.2.2127 tries to shift op by -1; fix this program [ 98.223434][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.230636][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.239773][ T9230] netlink: 'syz.3.2130': attribute type 39 has an invalid length. [ 98.270254][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.280827][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.314419][ T9220] vlan2: entered allmulticast mode [ 98.319766][ T9220] dummy0: entered allmulticast mode [ 98.329278][ T9231] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.343618][ T1605] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.352435][ T1605] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.360939][ T1605] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.405554][ T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 98.460188][ T9242] loop0: detected capacity change from 0 to 512 [ 98.477863][ T9242] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.825863][ T9276] vhci_hcd: invalid port number 96 [ 98.831021][ T9276] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 99.055023][ T9283] lo speed is unknown, defaulting to 1000 [ 99.074780][ T9285] vlan0: entered allmulticast mode [ 99.080182][ T9285] dummy0: entered allmulticast mode [ 99.328566][ T3305] EXT4-fs unmount: 19 callbacks suppressed [ 99.328584][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.350657][ T9293] bridge0: port 3(team0) entered blocking state [ 99.357050][ T9293] bridge0: port 3(team0) entered disabled state [ 99.375260][ T9293] team0: entered allmulticast mode [ 99.380536][ T9293] team_slave_0: entered allmulticast mode [ 99.386430][ T9293] team_slave_1: entered allmulticast mode [ 99.403891][ T9293] team0: entered promiscuous mode [ 99.408983][ T9293] team_slave_0: entered promiscuous mode [ 99.414948][ T9293] team_slave_1: entered promiscuous mode [ 99.434781][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 99.434798][ T29] audit: type=1326 audit(1756368323.795:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.497937][ T29] audit: type=1326 audit(1756368323.825:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.521545][ T29] audit: type=1326 audit(1756368323.825:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.545044][ T29] audit: type=1326 audit(1756368323.825:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.569020][ T29] audit: type=1326 audit(1756368323.825:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.592588][ T29] audit: type=1326 audit(1756368323.825:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.616037][ T29] audit: type=1326 audit(1756368323.825:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.639538][ T29] audit: type=1326 audit(1756368323.835:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.663081][ T29] audit: type=1326 audit(1756368323.835:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.686562][ T29] audit: type=1326 audit(1756368323.835:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222b09ebe9 code=0x7ffc0000 [ 99.748794][ T23] hid_parser_main: 24 callbacks suppressed [ 99.748812][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.762280][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.770084][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.777661][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.785209][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.792720][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.800270][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.807718][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.815376][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.822924][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.833394][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.870639][ T9322] loop0: detected capacity change from 0 to 1024 [ 99.901863][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.950989][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.007718][ T9335] __nla_validate_parse: 5 callbacks suppressed [ 100.007748][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 101.401143][ T9374] netlink: 'syz.3.2186': attribute type 30 has an invalid length. [ 101.418282][ T9377] netlink: 'syz.1.2184': attribute type 39 has an invalid length. [ 101.615164][ T9403] loop3: detected capacity change from 0 to 512 [ 101.648797][ T9403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.652228][ T9407] lo speed is unknown, defaulting to 1000 [ 101.682026][ T9403] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.697355][ T9413] netlink: 'syz.1.2201': attribute type 30 has an invalid length. [ 101.745777][ T9414] loop0: detected capacity change from 0 to 8192 [ 101.752891][ T9414] msdos: Unknown parameter 'A' [ 102.526498][ T9449] lo speed is unknown, defaulting to 1000 [ 102.574348][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.621601][ T9457] lo speed is unknown, defaulting to 1000 [ 102.890825][ T9473] lo speed is unknown, defaulting to 1000 [ 102.959284][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 103.000619][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.007970][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.016531][ T9473] bridge_slave_0: entered allmulticast mode [ 103.023232][ T9473] bridge_slave_0: entered promiscuous mode [ 103.030129][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.037759][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.046061][ T9473] bridge_slave_1: entered allmulticast mode [ 103.052736][ T9473] bridge_slave_1: entered promiscuous mode [ 103.072651][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.083554][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.104407][ T9473] team0: Port device team_slave_0 added [ 103.110936][ T9473] team0: Port device team_slave_1 added [ 103.127609][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.134630][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.160750][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.172474][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.179417][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.205493][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.228066][ T9473] hsr_slave_0: entered promiscuous mode [ 103.234130][ T9473] hsr_slave_1: entered promiscuous mode [ 103.239887][ T9473] debugfs: 'hsr0' already exists in 'hsr' [ 103.245631][ T9473] Cannot create hsr debugfs directory [ 103.484332][ T9473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.493374][ T9473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.501774][ T9473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.510342][ T9473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.525146][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.532209][ T9473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.539451][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.546572][ T9473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.570912][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.583274][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.590859][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.602491][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.612349][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.619582][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.629891][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.637031][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.690902][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.741914][ T9473] veth0_vlan: entered promiscuous mode [ 103.749321][ T9473] veth1_vlan: entered promiscuous mode [ 103.763757][ T9473] veth0_macvtap: entered promiscuous mode [ 103.770702][ T9473] veth1_macvtap: entered promiscuous mode [ 103.780222][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.790881][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.801194][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.813695][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.823873][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.832991][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.042908][ T9518] lo speed is unknown, defaulting to 1000 [ 104.093883][ T9518] loop3: detected capacity change from 0 to 8192 [ 104.100450][ T9518] msdos: Unknown parameter 'A' [ 104.736807][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 104.778015][ T9621] loop2: detected capacity change from 0 to 8192 [ 105.301557][ T9680] lo speed is unknown, defaulting to 1000 [ 105.307848][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 105.307929][ T29] audit: type=1326 audit(1756368329.665:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.358039][ T29] audit: type=1326 audit(1756368329.665:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.381665][ T29] audit: type=1326 audit(1756368329.695:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.405270][ T29] audit: type=1326 audit(1756368329.695:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.428809][ T29] audit: type=1326 audit(1756368329.695:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.452398][ T29] audit: type=1326 audit(1756368329.705:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.476230][ T29] audit: type=1326 audit(1756368329.705:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.499901][ T29] audit: type=1326 audit(1756368329.705:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.499960][ T9680] loop6: detected capacity change from 0 to 8192 [ 105.500240][ T9680] msdos: Unknown parameter 'A' [ 105.523509][ T29] audit: type=1326 audit(1756368329.705:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.558382][ T29] audit: type=1326 audit(1756368329.705:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d025ebe9 code=0x7ffc0000 [ 105.602392][ T9690] lo speed is unknown, defaulting to 1000 [ 105.614502][ T9690] lo speed is unknown, defaulting to 1000 [ 105.620420][ T9690] lo speed is unknown, defaulting to 1000 [ 105.627027][ T9690] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.652450][ T9690] lo speed is unknown, defaulting to 1000 [ 105.677770][ T9690] lo speed is unknown, defaulting to 1000 [ 105.687609][ T9697] loop3: detected capacity change from 0 to 2048 [ 105.700885][ T9690] lo speed is unknown, defaulting to 1000 [ 105.710459][ T9690] lo speed is unknown, defaulting to 1000 [ 105.717633][ T9690] lo speed is unknown, defaulting to 1000 [ 105.732764][ T9690] lo speed is unknown, defaulting to 1000 [ 105.742699][ T9697] loop3: p1 < > p4 [ 105.753803][ T9697] loop3: p4 size 8388608 extends beyond EOD, truncated [ 105.775617][ T9690] lo speed is unknown, defaulting to 1000 [ 105.867229][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2265'. [ 106.440229][ T9799] loop3: detected capacity change from 0 to 4096 [ 106.462118][ T9799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.494631][ T9799] EXT4-fs (loop3): shut down requested (0) [ 106.549724][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.614741][ T9816] lo speed is unknown, defaulting to 1000 [ 106.620989][ T9816] lo speed is unknown, defaulting to 1000 [ 106.720947][ T9834] loop3: detected capacity change from 0 to 8192 [ 106.727719][ T9834] msdos: Unknown parameter 'A' [ 106.870626][ T9841] loop6: detected capacity change from 0 to 8192 [ 107.161252][ T9868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.227549][ T9871] lo speed is unknown, defaulting to 1000 [ 107.246356][ T9871] lo speed is unknown, defaulting to 1000 [ 107.352228][ T9872] loop3: detected capacity change from 0 to 8192 [ 107.366870][ T9872] msdos: Unknown parameter 'A' [ 107.465598][ T9868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.558120][ T9868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.626411][ T9868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.745016][ T9896] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.763483][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 107.773878][ T9936] loop3: detected capacity change from 0 to 1024 [ 107.789864][ T9948] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.804213][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 107.815873][ T9948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816426][ T9936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.836928][ T9948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.923920][ T9958] siw: device registration error -23 [ 107.935415][ T9936] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 107.970834][ T9958] loop2: detected capacity change from 0 to 2048 [ 107.984760][ T9936] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 107.997241][ T9936] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.997241][ T9936] [ 108.007065][ T9936] EXT4-fs (loop3): Total free blocks count 0 [ 108.013204][ T9936] EXT4-fs (loop3): Free/Dirty block details [ 108.019273][ T9936] EXT4-fs (loop3): free_blocks=20480 [ 108.024599][ T9936] EXT4-fs (loop3): dirty_blocks=96 [ 108.029768][ T9936] EXT4-fs (loop3): Block reservation details [ 108.035833][ T9936] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 108.092381][ T9958] loop2: p1 < > p4 [ 108.104974][ T9958] loop2: p4 size 8388608 extends beyond EOD, truncated [ 108.113245][ T9924] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.416166][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 108.455911][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 108.564128][ T9988] lo speed is unknown, defaulting to 1000 [ 108.613802][ T9988] lo speed is unknown, defaulting to 1000 [ 108.839465][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2338'. [ 108.900889][T10015] pim6reg1: entered promiscuous mode [ 108.906291][T10015] pim6reg1: entered allmulticast mode [ 109.892499][T10059] loop0: detected capacity change from 0 to 1024 [ 109.927889][T10059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.945991][T10059] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 109.962780][T10059] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 109.975262][T10059] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.975262][T10059] [ 109.985029][T10059] EXT4-fs (loop0): Total free blocks count 0 [ 109.991117][T10059] EXT4-fs (loop0): Free/Dirty block details [ 109.997072][T10059] EXT4-fs (loop0): free_blocks=20480 [ 110.002399][T10059] EXT4-fs (loop0): dirty_blocks=96 [ 110.007567][T10059] EXT4-fs (loop0): Block reservation details [ 110.013603][T10059] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 110.070629][ T6079] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.114261][T10079] loop9: detected capacity change from 0 to 7 [ 110.120626][T10079] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.128572][T10079] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.136437][T10079] loop9: unable to read partition table [ 110.139172][T10085] loop6: detected capacity change from 0 to 128 [ 110.142379][T10079] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 110.142379][T10079] ) failed (rc=-5) [ 110.315364][T10092] ================================================================== [ 110.323755][T10092] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 110.331856][T10092] [ 110.334365][T10092] write to 0xffff88811688b2e8 of 8 bytes by task 10085 on cpu 1: [ 110.342087][T10092] filemap_splice_read+0x4f4/0x740 [ 110.347229][T10092] splice_direct_to_actor+0x26f/0x680 [ 110.352634][T10092] do_splice_direct+0xda/0x150 [ 110.357502][T10092] do_sendfile+0x380/0x650 [ 110.361979][T10092] __x64_sys_sendfile64+0x105/0x150 [ 110.367208][T10092] x64_sys_call+0x2bb0/0x2ff0 [ 110.371900][T10092] do_syscall_64+0xd2/0x200 [ 110.376442][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.382352][T10092] [ 110.384680][T10092] write to 0xffff88811688b2e8 of 8 bytes by task 10092 on cpu 0: [ 110.392401][T10092] filemap_splice_read+0x4f4/0x740 [ 110.397621][T10092] splice_direct_to_actor+0x26f/0x680 [ 110.403099][T10092] do_splice_direct+0xda/0x150 [ 110.407877][T10092] do_sendfile+0x380/0x650 [ 110.412410][T10092] __x64_sys_sendfile64+0x105/0x150 [ 110.417637][T10092] x64_sys_call+0x2bb0/0x2ff0 [ 110.422362][T10092] do_syscall_64+0xd2/0x200 [ 110.426921][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.432834][T10092] [ 110.435203][T10092] value changed: 0x00000000000001d0 -> 0x00000000000001d1 [ 110.442335][T10092] [ 110.444689][T10092] Reported by Kernel Concurrency Sanitizer on: [ 110.450851][T10092] CPU: 0 UID: 0 PID: 10092 Comm: syz.6.2360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.462239][T10092] Tainted: [W]=WARN [ 110.466054][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.476212][T10092] ================================================================== [ 110.683472][T10092] ================================================================== [ 110.691588][T10092] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 110.699504][T10092] [ 110.701842][T10092] write to 0xffff88811a452314 of 4 bytes by task 10085 on cpu 0: [ 110.709550][T10092] xas_set_mark+0x12b/0x140 [ 110.714075][T10092] __folio_start_writeback+0x1dd/0x440 [ 110.719600][T10092] __block_write_full_folio+0x53a/0x8f0 [ 110.725126][T10092] block_write_full_folio+0x2c2/0x2e0 [ 110.730475][T10092] mpage_writepages+0x6cf/0x1250 [ 110.735394][T10092] fat_writepages+0x24/0x30 [ 110.740052][T10092] do_writepages+0x1c3/0x310 [ 110.744814][T10092] file_write_and_wait_range+0x156/0x2c0 [ 110.750516][T10092] __generic_file_fsync+0x46/0x140 [ 110.755605][T10092] fat_file_fsync+0x49/0x100 [ 110.760180][T10092] vfs_fsync_range+0x10d/0x130 [ 110.764925][T10092] generic_file_write_iter+0x1b8/0x2f0 [ 110.770378][T10092] iter_file_splice_write+0x663/0xa60 [ 110.775723][T10092] direct_splice_actor+0x153/0x2a0 [ 110.780893][T10092] splice_direct_to_actor+0x30f/0x680 [ 110.786248][T10092] do_splice_direct+0xda/0x150 [ 110.791095][T10092] do_sendfile+0x380/0x650 [ 110.795501][T10092] __x64_sys_sendfile64+0x105/0x150 [ 110.800680][T10092] x64_sys_call+0x2bb0/0x2ff0 [ 110.805335][T10092] do_syscall_64+0xd2/0x200 [ 110.809855][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.815747][T10092] [ 110.818049][T10092] read to 0xffff88811a452314 of 4 bytes by task 10092 on cpu 1: [ 110.825748][T10092] __writeback_single_inode+0x1f9/0x7c0 [ 110.831296][T10092] writeback_single_inode+0x167/0x3e0 [ 110.836818][T10092] sync_inode_metadata+0x5b/0x90 [ 110.841733][T10092] __generic_file_fsync+0xf8/0x140 [ 110.846819][T10092] fat_file_fsync+0x49/0x100 [ 110.851391][T10092] vfs_fsync_range+0x10d/0x130 [ 110.856149][T10092] generic_file_write_iter+0x1b8/0x2f0 [ 110.861605][T10092] iter_file_splice_write+0x663/0xa60 [ 110.866961][T10092] direct_splice_actor+0x153/0x2a0 [ 110.872115][T10092] splice_direct_to_actor+0x30f/0x680 [ 110.877496][T10092] do_splice_direct+0xda/0x150 [ 110.882283][T10092] do_sendfile+0x380/0x650 [ 110.886699][T10092] __x64_sys_sendfile64+0x105/0x150 [ 110.891891][T10092] x64_sys_call+0x2bb0/0x2ff0 [ 110.896588][T10092] do_syscall_64+0xd2/0x200 [ 110.901149][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.907025][T10092] [ 110.909349][T10092] value changed: 0x0a000021 -> 0x04000021 [ 110.915042][T10092] [ 110.917348][T10092] Reported by Kernel Concurrency Sanitizer on: [ 110.923558][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.6.2360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.935016][T10092] Tainted: [W]=WARN [ 110.939282][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.949426][T10092] ==================================================================