last executing test programs: 47.883379271s ago: executing program 0 (id=1818): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 47.767589934s ago: executing program 0 (id=1824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}]}}]}, 0xa4}}, 0x0) 47.734006474s ago: executing program 0 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 47.713220234s ago: executing program 0 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 47.695615605s ago: executing program 0 (id=1828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80100000001}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) 47.470636438s ago: executing program 0 (id=1833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2d, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1}}, 0x40) 47.441831879s ago: executing program 32 (id=1833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2d, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1}}, 0x40) 47.35785206s ago: executing program 1 (id=1838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}]}}]}, 0xa4}}, 0x0) 47.301972402s ago: executing program 1 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 47.270356341s ago: executing program 1 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 47.252279762s ago: executing program 1 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 47.214396942s ago: executing program 1 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) pwrite64(r1, 0x0, 0x0, 0x414) 46.961538567s ago: executing program 1 (id=1848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0)) 46.961409307s ago: executing program 33 (id=1848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0)) 31.878438442s ago: executing program 5 (id=2307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 31.829917873s ago: executing program 5 (id=2310): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) 31.724180234s ago: executing program 5 (id=2314): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048c9) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 31.659080406s ago: executing program 5 (id=2319): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 31.347183611s ago: executing program 5 (id=2338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 31.106744624s ago: executing program 5 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x40003}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x80000000000b52, 0x0) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 31.106618185s ago: executing program 34 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x40003}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x80000000000b52, 0x0) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 29.620616969s ago: executing program 2 (id=2384): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 29.510240881s ago: executing program 2 (id=2388): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 29.430235162s ago: executing program 2 (id=2390): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 29.350713943s ago: executing program 2 (id=2394): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x11ff, &(0x7f0000003300)="$eJzs3E+LHEUYB+A348bdbNw/aowmBy3w4qnJ7sGTIItsQHZAiVkhEYSO26vDtjPD9LAwIkZPXv0cnr0JfoO9+Bm87cVjDmJLurMmEyeRHLIDyfMcpl+q6kd1wTDQQ1Ufv/fT1wf7Vbafj6Nz5kx0hhHpTooUnTjx5k57vXFzZ6vb3b6W0tWt6xvvppRW3/rts28XI+L8p7+s/roYR+ufH/+5+cfRxaNLx39f/6pXpV6V+oNxytOtwWCc3yqLtNerDrKUPi6LvCpSr18Vo6n+/XIwHE5S3t9bWR6OiqpKeX+SDopJGg/SeDRJ+Zd5r5+yLEsry8Ejnf3/Ibs/36nrOqKuz8aLUdd1fS6W43y8FCuxGt9HxMvxSrwaF+K1uBivxxtxqRl1GrcPAAAAAAAAAAAAAAAAAAAAz4/Hnf9fi3Xn/wEAAAAAAAAAAAAAAAAAAOAUfHLj5s5Wt7t9LaWliPLHw93D3fba9m/tRy/KKOJKrMVf0Zz+b7X11Q+721dSYz1+KG/fy98+3H2hzd/9uJvfaF4ncC+/0PSd5DfafJrOL8byg/NvxlpcmD3/5sz8Urzz9gP5LNbi9y9iEGXsNXPfz3+3kdIHH3Ufyl9uxgEAAMCzIEv/mvn8nmWP6m/zT/D/wEPP1wtxeWG+ayeimnxzkHfKYtQU5Umx9J8WxWOKxemWzlOaqxNzX6niWS3OxXTLvH+ZOA33vwbzvhMAAAAAAAAAAACexFPeV7gQM3aWvT+fpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAAAD///7lyMc=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 29.174574246s ago: executing program 2 (id=2397): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 28.864342321s ago: executing program 2 (id=2404): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3, r3}}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 28.825959551s ago: executing program 35 (id=2404): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3, r3}}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 18.433997371s ago: executing program 4 (id=2699): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = epoll_create(0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000003c0), 0x4) 18.378020062s ago: executing program 4 (id=2704): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048c9) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 18.321573443s ago: executing program 4 (id=2708): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40015) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 18.135875956s ago: executing program 4 (id=2715): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17.582059635s ago: executing program 4 (id=2727): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 17.312694809s ago: executing program 4 (id=2736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 17.312457599s ago: executing program 36 (id=2736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 779.967588ms ago: executing program 9 (id=3242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x1]}, 0x8) name_to_handle_at(r2, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) 714.087659ms ago: executing program 9 (id=3246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @local, 0xe}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x40) 653.7494ms ago: executing program 9 (id=3249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = gettid() tkill(r2, 0x11) 652.88081ms ago: executing program 9 (id=3252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) chroot(&(0x7f0000000000)='./file0/../file0\x00') 564.449241ms ago: executing program 6 (id=3254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 563.627901ms ago: executing program 9 (id=3257): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 563.429842ms ago: executing program 8 (id=3258): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 500.693943ms ago: executing program 6 (id=3259): r0 = syz_io_uring_setup(0x158f, &(0x7f00000002c0)={0x0, 0x9840, 0x800, 0x3, 0x2d9}, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x5341, 0x7a54, 0x4, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 500.445693ms ago: executing program 3 (id=3260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x10, @private1, 0x6}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) 495.533133ms ago: executing program 8 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dbe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) mlockall(0x7) 476.549613ms ago: executing program 3 (id=3262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)=""/142) 428.794114ms ago: executing program 9 (id=3263): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) 419.137144ms ago: executing program 7 (id=3264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 405.708524ms ago: executing program 8 (id=3265): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 405.409874ms ago: executing program 3 (id=3266): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 308.708836ms ago: executing program 7 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) 94.977349ms ago: executing program 8 (id=3275): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 16.780541ms ago: executing program 7 (id=3276): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 16.540951ms ago: executing program 8 (id=3277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 16.373111ms ago: executing program 6 (id=3278): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) fsync(r0) 10.71265ms ago: executing program 6 (id=3280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @empty}}, 0x800, 0x0, 0x0, 0x0, 0xd0, 0x3ff, 0x40}, 0x9c) 0s ago: executing program 7 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) kernel console output (not intermixed with test programs): e path [ 79.167853][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 79.167870][ T29] audit: type=1400 audit(1745429767.699:754): avc: denied { mount } for pid=7675 comm="syz.2.1890" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.218131][ T7680] loop2: detected capacity change from 0 to 512 [ 79.226813][ T29] audit: type=1400 audit(1745429767.709:755): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.247978][ T7680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.261553][ T7680] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1891: invalid block [ 79.281762][ T7687] loop6: detected capacity change from 0 to 512 [ 79.289349][ T7680] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1891: invalid indirect mapped block 4294967295 (level 1) [ 79.304998][ T7680] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1891: invalid indirect mapped block 4294967295 (level 1) [ 79.324494][ T7680] EXT4-fs (loop2): 2 truncates cleaned up [ 79.338991][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #3: comm syz.6.1894: corrupted inode contents [ 79.352575][ T7680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.394042][ T7687] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm syz.6.1894: mark_inode_dirty error [ 79.394408][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.418768][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #3: comm syz.6.1894: corrupted inode contents [ 79.438814][ T7687] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1894: mark_inode_dirty error [ 79.451851][ T7687] Quota error (device loop6): write_blk: dquota write failed [ 79.462046][ T7687] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 79.472915][ T7687] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1894: Failed to acquire dquot type 0 [ 79.488149][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1894: corrupted inode contents [ 79.501256][ T7687] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.1894: mark_inode_dirty error [ 79.524123][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1894: corrupted inode contents [ 79.538339][ T7687] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1894: mark_inode_dirty error [ 79.550597][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1894: corrupted inode contents [ 79.567358][ T7687] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 79.583714][ T7699] 9pnet: Could not find request transport: f [ 79.600755][ T7687] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1894: corrupted inode contents [ 79.621130][ T7687] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.1894: mark_inode_dirty error [ 79.635470][ T7687] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 79.648046][ T7687] EXT4-fs (loop6): 1 truncate cleaned up [ 79.654670][ T7687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.670383][ T7687] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.714056][ T29] audit: type=1326 audit(1745429768.239:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 79.714944][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.777318][ T29] audit: type=1326 audit(1745429768.239:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 79.802462][ T29] audit: type=1326 audit(1745429768.239:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 79.827670][ T29] audit: type=1326 audit(1745429768.239:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 79.853372][ T29] audit: type=1326 audit(1745429768.239:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 79.879121][ T29] audit: type=1400 audit(1745429768.299:761): avc: denied { mount } for pid=7714 comm="syz.2.1907" name="/" dev="configfs" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 79.919324][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.952431][ T7719] loop6: detected capacity change from 0 to 512 [ 79.960470][ T7719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.990093][ T7719] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1908: invalid block [ 79.991139][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.022039][ T7719] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1908: invalid indirect mapped block 4294967295 (level 1) [ 80.038366][ T7719] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1908: invalid indirect mapped block 4294967295 (level 1) [ 80.055067][ T7719] EXT4-fs (loop6): 2 truncates cleaned up [ 80.062023][ T7719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.120392][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.160926][ T7737] loop5: detected capacity change from 0 to 512 [ 80.168756][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.199214][ T7737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.228524][ T7737] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.245954][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.261099][ T7743] loop2: detected capacity change from 0 to 8192 [ 80.300084][ T7496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.320841][ T7752] loop6: detected capacity change from 0 to 128 [ 80.337197][ T7752] EXT4-fs: Ignoring removed orlov option [ 80.350315][ T52] bridge_slave_1: left allmulticast mode [ 80.356361][ T52] bridge_slave_1: left promiscuous mode [ 80.362739][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.373715][ T52] bridge_slave_0: left allmulticast mode [ 80.374136][ T7752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.379625][ T52] bridge_slave_0: left promiscuous mode [ 80.399088][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.408174][ T7752] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.422396][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 80.432820][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 80.449059][ T7532] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.514386][ T7768] loop6: detected capacity change from 0 to 512 [ 80.522202][ T7768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.533594][ T7768] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1928: invalid block [ 80.547903][ T7768] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1928: invalid indirect mapped block 4294967295 (level 1) [ 80.563570][ T7768] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1928: invalid indirect mapped block 4294967295 (level 1) [ 80.579006][ T7768] EXT4-fs (loop6): 2 truncates cleaned up [ 80.585469][ T7768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.613692][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.626057][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.636605][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.636747][ T52] bond0 (unregistering): Released all slaves [ 80.699512][ T52] IPVS: stopping master sync thread 3733 ... [ 80.713542][ T52] hsr_slave_0: left promiscuous mode [ 80.722239][ T52] hsr_slave_1: left promiscuous mode [ 80.731081][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.731797][ T7779] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.752711][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.760793][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.797860][ T52] veth1_macvtap: left promiscuous mode [ 80.803929][ T52] veth0_macvtap: left promiscuous mode [ 80.822809][ T52] veth1_vlan: left promiscuous mode [ 80.830604][ T52] veth0_vlan: left promiscuous mode [ 80.957187][ T52] team0 (unregistering): Port device team_slave_1 removed [ 80.978583][ T52] team0 (unregistering): Port device team_slave_0 removed [ 81.018213][ T7804] loop4: detected capacity change from 0 to 512 [ 81.038184][ T7804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.070514][ T7804] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1940: invalid block [ 81.073466][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 81.089752][ T7811] loop6: detected capacity change from 0 to 164 [ 81.097483][ T7809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1945'. [ 81.101145][ T7804] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1940: invalid indirect mapped block 4294967295 (level 1) [ 81.126122][ T7811] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.140214][ T7804] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1940: invalid indirect mapped block 4294967295 (level 1) [ 81.156606][ T7804] EXT4-fs (loop4): 2 truncates cleaned up [ 81.161371][ T7811] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.162885][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.172608][ T7811] Symlink component flag not implemented [ 81.192924][ T7811] Symlink component flag not implemented [ 81.199971][ T7811] Symlink component flag not implemented (7) [ 81.206333][ T7811] Symlink component flag not implemented (116) [ 81.266672][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.014866][ T7850] loop3: detected capacity change from 0 to 512 [ 82.023016][ T7850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.033881][ T7850] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1961: invalid block [ 82.046672][ T7850] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1961: invalid indirect mapped block 4294967295 (level 1) [ 82.061730][ T7850] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1961: invalid indirect mapped block 4294967295 (level 1) [ 82.076666][ T7850] EXT4-fs (loop3): 2 truncates cleaned up [ 82.083115][ T7850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.119401][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.157312][ T7853] SELinux: failed to load policy [ 82.185403][ T7855] loop3: detected capacity change from 0 to 512 [ 82.196443][ T7855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.207024][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1964'. [ 82.228172][ T7855] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1972: invalid block [ 82.250959][ T7855] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1972: invalid indirect mapped block 4294967295 (level 1) [ 82.270367][ T7855] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1972: invalid indirect mapped block 4294967295 (level 1) [ 82.288692][ T7855] EXT4-fs (loop3): 2 truncates cleaned up [ 82.289499][ T7855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.341485][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.530699][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1977'. [ 82.551425][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1977'. [ 82.767377][ T7904] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 82.779486][ T7903] IPVS: stopping master sync thread 7904 ... [ 83.185026][ T7951] 9pnet: Could not find request transport: 0xffffffffffffffff [ 83.388256][ T7967] team_slave_0: entered promiscuous mode [ 83.394984][ T7967] team_slave_1: entered promiscuous mode [ 83.402786][ T7967] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 83.412416][ T7967] team0: Device macvtap1 is already an upper device of the team interface [ 83.423786][ T7967] team_slave_0: left promiscuous mode [ 83.431002][ T7967] team_slave_1: left promiscuous mode [ 83.511638][ T7973] loop2: detected capacity change from 0 to 164 [ 83.521630][ T7973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.547506][ T7973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.559297][ T7973] Symlink component flag not implemented [ 83.567421][ T7973] Symlink component flag not implemented [ 83.579801][ T7973] Symlink component flag not implemented (7) [ 83.586235][ T7973] Symlink component flag not implemented (116) [ 83.603384][ T7981] team_slave_0: entered promiscuous mode [ 83.609408][ T7981] team_slave_1: entered promiscuous mode [ 83.618618][ T7981] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 83.629342][ T7981] team0: Device macvtap1 is already an upper device of the team interface [ 83.647696][ T7981] team_slave_0: left promiscuous mode [ 83.653871][ T7981] team_slave_1: left promiscuous mode [ 83.679047][ T7985] 9pnet: Could not find request transport: 0xffffffffffffffff [ 83.755016][ T7993] __nla_validate_parse: 2 callbacks suppressed [ 83.755031][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 83.771213][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 83.809157][ T7998] loop2: detected capacity change from 0 to 128 [ 83.821510][ T7998] EXT4-fs: Ignoring removed orlov option [ 83.843366][ T7998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.864071][ T7998] ext4 filesystem being mounted at /415/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.951777][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.166252][ T8042] 9pnet: Could not find request transport: f [ 84.188598][ T8049] loop5: detected capacity change from 0 to 512 [ 84.212087][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.2048: corrupted inode contents [ 84.235175][ T8049] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.2048: mark_inode_dirty error [ 84.255165][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.2048: corrupted inode contents [ 84.287496][ T8049] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2048: mark_inode_dirty error [ 84.304062][ T8049] __quota_error: 113 callbacks suppressed [ 84.304082][ T8049] Quota error (device loop5): write_blk: dquota write failed [ 84.318813][ T8049] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 84.331930][ T8049] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2048: Failed to acquire dquot type 0 [ 84.348725][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.2048: corrupted inode contents [ 84.368495][ T8049] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.2048: mark_inode_dirty error [ 84.384477][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.2048: corrupted inode contents [ 84.413320][ T8049] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2048: mark_inode_dirty error [ 84.435795][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.2048: corrupted inode contents [ 84.456865][ T8049] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 84.458274][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 84.480715][ T8049] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.2048: corrupted inode contents [ 84.502245][ T8049] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.2048: mark_inode_dirty error [ 84.517873][ T8049] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 84.529481][ T8049] EXT4-fs (loop5): 1 truncate cleaned up [ 84.540684][ T8049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.557392][ T8049] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.591420][ T7496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.654691][ T29] audit: type=1326 audit(1745429773.179:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 84.694442][ T29] audit: type=1326 audit(1745429773.179:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 84.701058][ T8086] loop5: detected capacity change from 0 to 128 [ 84.722428][ T29] audit: type=1326 audit(1745429773.179:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 84.734830][ T8086] EXT4-fs: Ignoring removed orlov option [ 84.757772][ T29] audit: type=1326 audit(1745429773.179:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 84.768247][ T8086] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.790087][ T29] audit: type=1326 audit(1745429773.179:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 84.806079][ T8086] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.830771][ T29] audit: type=1326 audit(1745429773.219:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63138ae969 code=0x7ffc0000 [ 84.870033][ T29] audit: type=1326 audit(1745429773.219:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63138ae969 code=0x7ffc0000 [ 84.903049][ T29] audit: type=1326 audit(1745429773.299:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63138ae969 code=0x7ffc0000 [ 84.945573][ T7496] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.979235][ T8095] loop5: detected capacity change from 0 to 512 [ 85.001371][ T8095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.025489][ T8095] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.079411][ T7496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.101954][ T8108] 9pnet: Could not find request transport: f [ 85.155364][ T8113] loop4: detected capacity change from 0 to 8192 [ 85.266686][ T8132] loop4: detected capacity change from 0 to 128 [ 85.282025][ T8127] loop5: detected capacity change from 0 to 8192 [ 85.293305][ T8134] loop3: detected capacity change from 0 to 164 [ 85.299997][ T8132] EXT4-fs: Ignoring removed orlov option [ 85.309115][ T8134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 85.339831][ T8134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 85.349401][ T8134] Symlink component flag not implemented [ 85.355685][ T8134] Symlink component flag not implemented [ 85.362838][ T8134] Symlink component flag not implemented (7) [ 85.367875][ T8132] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.369349][ T8134] Symlink component flag not implemented (116) [ 85.421872][ T8143] loop3: detected capacity change from 0 to 512 [ 85.444293][ T8143] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.039111][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 86.267516][ T8168] loop2: detected capacity change from 0 to 128 [ 86.342532][ T8174] loop4: detected capacity change from 0 to 164 [ 86.350441][ T8174] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.361922][ T8174] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.373803][ T8174] Symlink component flag not implemented [ 86.380792][ T8174] Symlink component flag not implemented [ 86.404644][ T8174] Symlink component flag not implemented (7) [ 86.412819][ T8174] Symlink component flag not implemented (116) [ 87.164591][ T8188] loop3: detected capacity change from 0 to 128 [ 87.171758][ T8180] loop4: detected capacity change from 0 to 512 [ 87.182938][ T8188] EXT4-fs: Ignoring removed orlov option [ 87.217941][ T8180] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.220044][ T8188] ext4 filesystem being mounted at /451/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.248408][ T8200] loop5: detected capacity change from 0 to 128 [ 87.303485][ T2969] kernel write not supported for file bpf-prog (pid: 2969 comm: kworker/1:2) [ 87.518419][ T8236] Invalid ELF header magic: != ELF [ 87.553312][ T8242] loop4: detected capacity change from 0 to 512 [ 87.566110][ T8242] journal_path: Lookup failure for './file0' [ 87.572496][ T8242] EXT4-fs: error: could not find journal device path [ 87.754835][ T8265] Invalid ELF header magic: != ELF [ 87.762903][ T8269] loop5: detected capacity change from 0 to 164 [ 87.792002][ T8269] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 87.807770][ T8269] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 87.820071][ T8269] Symlink component flag not implemented [ 87.826324][ T8269] Symlink component flag not implemented [ 87.833384][ T8269] Symlink component flag not implemented (7) [ 87.840196][ T8269] Symlink component flag not implemented (116) [ 87.878308][ T8278] loop5: detected capacity change from 0 to 512 [ 87.885909][ T8278] journal_path: Lookup failure for './file0' [ 87.892362][ T8278] EXT4-fs: error: could not find journal device path [ 87.975151][ T3383] kernel write not supported for file bpf-prog (pid: 3383 comm: kworker/0:4) [ 87.997035][ T8293] loop3: detected capacity change from 0 to 128 [ 88.083734][ T8307] loop5: detected capacity change from 0 to 164 [ 88.092507][ T8307] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.113279][ T8307] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.131334][ T8307] Symlink component flag not implemented [ 88.137252][ T8307] Symlink component flag not implemented [ 88.144161][ T8307] Symlink component flag not implemented (7) [ 88.150442][ T8307] Symlink component flag not implemented (116) [ 88.198339][ T3383] kernel write not supported for file bpf-prog (pid: 3383 comm: kworker/0:4) [ 88.283824][ T8339] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2175'. [ 88.304524][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 88.315578][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 88.428448][ T8363] Invalid ELF header magic: != ELF [ 88.719754][ T8392] loop2: detected capacity change from 0 to 2048 [ 88.775412][ T8392] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.948956][ T8392] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2201: bg 0: block 345: padding at end of block bitmap is not set [ 88.977063][ T8392] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 88.991778][ T8392] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.991778][ T8392] [ 89.093602][ T8397] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2213'. [ 89.215115][ T8406] Invalid ELF header magic: != ELF [ 89.415484][ T8423] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2216'. [ 89.507268][ T8437] C: renamed from team_slave_0 (while UP) [ 89.537213][ T8443] usb usb8: usbfs: process 8443 (syz.5.2225) did not claim interface 2 before use [ 89.541942][ T8437] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2222'. [ 89.560829][ T8437] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 89.578915][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2226'. [ 89.589378][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2226'. [ 89.700459][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 89.700476][ T29] audit: type=1400 audit(1745429778.229:920): avc: denied { append } for pid=8462 comm="syz.6.2233" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.736912][ T8463] vhci_hcd: invalid port number 249 [ 89.742485][ T8463] vhci_hcd: default hub control req: 4018 v000e i00f9 l0 [ 89.851252][ T8472] loop5: detected capacity change from 0 to 2048 [ 89.900898][ T29] audit: type=1400 audit(1745429778.429:921): avc: denied { create } for pid=8481 comm="syz.6.2241" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.902431][ T8482] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2241'. [ 89.974703][ T8472] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.008965][ T8472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2238: bg 0: block 345: padding at end of block bitmap is not set [ 90.030797][ T29] audit: type=1400 audit(1745429778.559:922): avc: denied { unlink } for pid=7532 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.083253][ T8472] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 90.097919][ T8472] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.097919][ T8472] [ 90.352914][ T8511] netlink: 'syz.5.2251': attribute type 3 has an invalid length. [ 90.655270][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2273'. [ 90.686931][ T8537] macvtap0: entered promiscuous mode [ 90.711625][ T8537] macvtap0: left promiscuous mode [ 90.815688][ T29] audit: type=1400 audit(1745429779.329:923): avc: denied { relabelfrom } for pid=8561 comm="syz.2.2277" name="NETLINK" dev="sockfs" ino=21102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.842096][ T29] audit: type=1400 audit(1745429779.339:924): avc: denied { relabelto } for pid=8561 comm="syz.2.2277" name="NETLINK" dev="sockfs" ino=21102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 90.880913][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.889381][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.916283][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.925151][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.933325][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.941782][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.954547][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.962793][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.971317][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.980455][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.989843][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 90.997782][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.006230][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.015157][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.023799][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.032503][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.040661][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.049929][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.058833][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.068070][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.076519][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.085745][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.095738][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.103793][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.112188][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.121505][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.130447][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.138938][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.147253][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.156204][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.166021][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.175858][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.184562][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.193035][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.202104][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.210152][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.218670][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 91.229104][ T3383] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.289817][ T29] audit: type=1400 audit(1745429779.819:925): avc: denied { create } for pid=8582 comm="syz.5.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.313761][ T29] audit: type=1400 audit(1745429779.849:926): avc: denied { write } for pid=8582 comm="syz.5.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.384019][ T8591] Invalid ELF header magic: != ELF [ 91.391849][ T29] audit: type=1400 audit(1745429779.909:927): avc: denied { module_load } for pid=8585 comm="syz.4.2287" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 91.419508][ T8595] vhci_hcd: invalid port number 15 [ 91.425091][ T8595] vhci_hcd: invalid port number 15 [ 91.464042][ T3383] IPVS: starting estimator thread 0... [ 91.565582][ T8601] IPVS: using max 2016 ests per chain, 100800 per kthread [ 91.618606][ T8627] ipvlan2: entered promiscuous mode [ 91.627479][ T8627] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.647287][ T8627] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.685251][ T29] audit: type=1400 audit(1745429780.209:928): avc: denied { create } for pid=8634 comm="syz.5.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.712650][ T29] audit: type=1400 audit(1745429780.239:929): avc: denied { write } for pid=8634 comm="syz.5.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.811699][ T8649] syz.2.2317: attempt to access beyond end of device [ 91.811699][ T8649] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 91.844859][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2320'. [ 91.852906][ T8655] loop5: detected capacity change from 0 to 512 [ 91.888004][ T8655] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.968473][ T8669] bond1: entered promiscuous mode [ 91.974223][ T8669] bond1: entered allmulticast mode [ 91.982682][ T8669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.995104][ T8669] bond1 (unregistering): Released all slaves [ 92.069304][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 92.119294][ T8693] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.170453][ T8696] bond1: entered promiscuous mode [ 92.176292][ T8696] bond1: entered allmulticast mode [ 92.194089][ T8696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.205628][ T8696] bond1 (unregistering): Released all slaves [ 92.346228][ T4747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.450303][ T4747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.502349][ T4747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.557312][ T8727] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 92.568972][ T4747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.675400][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 92.700102][ T4747] bridge_slave_1: left allmulticast mode [ 92.709314][ T4747] bridge_slave_1: left promiscuous mode [ 92.718189][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.763379][ T4747] bridge_slave_0: left allmulticast mode [ 92.769754][ T4747] bridge_slave_0: left promiscuous mode [ 92.776076][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.970249][ T4747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.982137][ T4747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.989672][ T8767] loop3: detected capacity change from 0 to 128 [ 93.000007][ T4747] bond0 (unregistering): Released all slaves [ 93.017619][ T8767] ext4 filesystem being mounted at /510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.056544][ T8767] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.3.2367: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 93.113749][ T4747] hsr_slave_0: left promiscuous mode [ 93.132461][ T4747] hsr_slave_1: left promiscuous mode [ 93.143205][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.152772][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.161336][ T4747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.169421][ T4747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.189064][ T4747] veth1_macvtap: left promiscuous mode [ 93.197290][ T4747] veth0_macvtap: left promiscuous mode [ 93.204474][ T4747] veth1_vlan: left promiscuous mode [ 93.211511][ T4747] veth0_vlan: left promiscuous mode [ 93.301734][ T4747] team0 (unregistering): Port device team_slave_1 removed [ 93.311593][ T4747] team0 (unregistering): Port device team_slave_0 removed [ 93.364235][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.373564][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.382281][ T8712] bridge_slave_0: entered allmulticast mode [ 93.396943][ T8712] bridge_slave_0: entered promiscuous mode [ 93.417485][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.425336][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.436132][ T8712] bridge_slave_1: entered allmulticast mode [ 93.443785][ T8712] bridge_slave_1: entered promiscuous mode [ 93.469588][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.483135][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.541303][ T8712] team0: Port device team_slave_0 added [ 93.563036][ T8712] team0: Port device team_slave_1 added [ 93.592623][ T8802] usb usb1: usbfs: process 8802 (syz.4.2378) did not claim interface 0 before use [ 93.603745][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.613606][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.642354][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.659717][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.669333][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.702905][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.741561][ T8712] hsr_slave_0: entered promiscuous mode [ 93.748490][ T8712] hsr_slave_1: entered promiscuous mode [ 93.936780][ T8859] IPv6: Can't replace route, no match found [ 94.046474][ T8712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.057428][ T8869] SELinux: Context Ü is not valid (left unmapped). [ 94.079989][ T8712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.109902][ T8712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.145041][ T8712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.226683][ T8882] loop2: detected capacity change from 0 to 8192 [ 94.241453][ T8882] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.245752][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.319033][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.341037][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.348954][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.389878][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.398073][ T8822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.554525][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.609222][ T781] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.650573][ T781] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.739738][ T781] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.779099][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 94.779116][ T29] audit: type=1400 audit(1745429783.309:1003): avc: denied { setopt } for pid=8922 comm="syz.3.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.811410][ T781] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.887983][ T8712] veth0_vlan: entered promiscuous mode [ 94.912266][ T8712] veth1_vlan: entered promiscuous mode [ 94.932137][ T8712] veth0_macvtap: entered promiscuous mode [ 94.949559][ T8936] batadv_slave_0: entered promiscuous mode [ 94.959199][ T8712] veth1_macvtap: entered promiscuous mode [ 94.984438][ T8934] batadv_slave_0: left promiscuous mode [ 94.994660][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.006459][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.017601][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.028711][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.040006][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.054007][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.066276][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.078598][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.101376][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.117527][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.129042][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.139682][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.150690][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.172815][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.223623][ T8712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.233452][ T8712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243045][ T8712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.253050][ T8712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313120][ T781] bridge_slave_1: left allmulticast mode [ 95.319445][ T781] bridge_slave_1: left promiscuous mode [ 95.325206][ T781] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.336142][ T781] bridge_slave_0: left allmulticast mode [ 95.341829][ T781] bridge_slave_0: left promiscuous mode [ 95.347720][ T781] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.357700][ T29] audit: type=1326 audit(1745429783.899:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.382466][ T29] audit: type=1326 audit(1745429783.899:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.411575][ T29] audit: type=1326 audit(1745429783.949:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.437343][ T29] audit: type=1326 audit(1745429783.949:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.462377][ T29] audit: type=1326 audit(1745429783.949:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.487842][ T29] audit: type=1326 audit(1745429783.949:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.512895][ T29] audit: type=1326 audit(1745429783.949:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.536773][ T29] audit: type=1326 audit(1745429783.949:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.560749][ T29] audit: type=1326 audit(1745429783.949:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.6.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 95.739126][ T781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.754819][ T781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.777361][ T781] bond0 (unregistering): Released all slaves [ 95.857272][ T781] hsr_slave_0: left promiscuous mode [ 95.881086][ T781] hsr_slave_1: left promiscuous mode [ 95.894495][ T781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.902100][ T781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.936124][ T781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.944765][ T781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.987328][ T781] veth1_macvtap: left promiscuous mode [ 95.993837][ T781] veth0_macvtap: left promiscuous mode [ 96.013476][ T781] veth1_vlan: left promiscuous mode [ 96.019180][ T781] veth0_vlan: left promiscuous mode [ 96.178850][ T781] team0 (unregistering): Port device team_slave_1 removed [ 96.188673][ T781] team0 (unregistering): Port device team_slave_0 removed [ 96.294344][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 96.353402][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.361060][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.372027][ T8920] bridge_slave_0: entered allmulticast mode [ 96.379878][ T8920] bridge_slave_0: entered promiscuous mode [ 96.387564][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.395683][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.403906][ T8920] bridge_slave_1: entered allmulticast mode [ 96.411847][ T8920] bridge_slave_1: entered promiscuous mode [ 96.434308][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.459232][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.485616][ T8920] team0: Port device team_slave_0 added [ 96.500817][ T8920] team0: Port device team_slave_1 added [ 96.535685][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.543005][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.569960][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.585905][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.592883][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.619486][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.662457][ T8920] hsr_slave_0: entered promiscuous mode [ 96.668822][ T8920] hsr_slave_1: entered promiscuous mode [ 96.675067][ T8920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.683290][ T8920] Cannot create hsr debugfs directory [ 96.708805][ T9010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2437'. [ 96.719396][ T9010] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2437'. [ 96.729794][ T9010] netlink: 'syz.3.2437': attribute type 6 has an invalid length. [ 96.738678][ T9010] netlink: 'syz.3.2437': attribute type 5 has an invalid length. [ 96.746892][ T9010] netlink: 'syz.3.2437': attribute type 4 has an invalid length. [ 96.755158][ T9010] netlink: 'syz.3.2437': attribute type 6 has an invalid length. [ 96.759262][ T9012] loop6: detected capacity change from 0 to 2048 [ 96.763887][ T9010] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2437'. [ 96.882306][ T8920] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 96.910011][ T8920] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 96.975078][ T8920] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 97.014739][ T8920] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 97.154207][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.170353][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.198604][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.206985][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.233900][ T8920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.245225][ T8920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.282813][ T9047] infiniband syz!: set active [ 97.291978][ T9047] infiniband syz!: added team_slave_0 [ 97.305425][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.313601][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.349822][ T9047] RDS/IB: syz!: added [ 97.353709][ T9063] loop7: detected capacity change from 0 to 128 [ 97.357619][ T9047] smc: adding ib device syz! with port count 1 [ 97.375631][ T9047] smc: ib device syz! port 1 has pnetid [ 97.391609][ T9067] loop4: detected capacity change from 0 to 1024 [ 97.398694][ T9062] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.398722][ T9062] FAT-fs (loop7): Filesystem has been set read-only [ 97.398747][ T9062] syz.7.2459: attempt to access beyond end of device [ 97.398747][ T9062] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.435130][ T9068] SELinux: policydb version 0 does not match my version range 15-34 [ 97.448855][ T9068] SELinux: failed to load policy [ 97.476524][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.520810][ T9062] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.529689][ T9062] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.545752][ T9062] syz.7.2459: attempt to access beyond end of device [ 97.545752][ T9062] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.562033][ T9074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.575615][ T9062] syz.7.2459: attempt to access beyond end of device [ 97.575615][ T9062] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.592002][ T9062] syz.7.2459: attempt to access beyond end of device [ 97.592002][ T9062] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.608999][ T9063] syz.7.2459: attempt to access beyond end of device [ 97.608999][ T9063] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.625435][ T9063] syz.7.2459: attempt to access beyond end of device [ 97.625435][ T9063] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.692199][ T9063] syz.7.2459: attempt to access beyond end of device [ 97.692199][ T9063] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.725267][ T9063] syz.7.2459: attempt to access beyond end of device [ 97.725267][ T9063] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.778183][ T8920] veth0_vlan: entered promiscuous mode [ 97.809998][ T8920] veth1_vlan: entered promiscuous mode [ 97.836952][ T8920] veth0_macvtap: entered promiscuous mode [ 97.854440][ T8920] veth1_macvtap: entered promiscuous mode [ 97.881021][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.895372][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.907010][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.920229][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.931928][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.943000][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.954145][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.965457][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.988770][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.016001][ T9098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.024245][ T9098] batadv_slave_0: entered promiscuous mode [ 98.036608][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.049223][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.060420][ T8920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.072366][ T8920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.093171][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2471'. [ 98.093837][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.117960][ T8920] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.127600][ T8920] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.136719][ T8920] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.145438][ T8920] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.227828][ T9111] netlink: 'syz.8.2405': attribute type 10 has an invalid length. [ 98.247675][ T9111] team0: Device hsr_slave_0 failed to register rx_handler [ 98.361087][ T9125] netlink: 'syz.6.2480': attribute type 3 has an invalid length. [ 98.520602][ T9149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.529543][ T9149] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.559920][ T9155] bridge0: port 3(macvlan2) entered blocking state [ 98.568898][ T9155] bridge0: port 3(macvlan2) entered disabled state [ 98.608282][ T9155] macvlan2: entered allmulticast mode [ 98.614906][ T9155] macvlan2: left allmulticast mode [ 98.757274][ T9162] loop4: detected capacity change from 0 to 512 [ 98.778107][ T9162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.841273][ T9162] EXT4-fs (loop4): 1 truncate cleaned up [ 98.852877][ T9162] EXT4-fs mount: 20 callbacks suppressed [ 98.852894][ T9162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.953954][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.128698][ T9192] loop8: detected capacity change from 0 to 2048 [ 99.148990][ T9192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.164383][ T9198] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2513'. [ 99.183556][ T9198] gretap0: entered promiscuous mode [ 99.235871][ T9203] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2513'. [ 99.249708][ T9203] 0ªX¹¦D: renamed from gretap0 [ 99.278388][ T9203] 0ªX¹¦D: left promiscuous mode [ 99.283501][ T9203] 0ªX¹¦D: entered allmulticast mode [ 99.314076][ T9203] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 99.333640][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2518'. [ 99.431022][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.490668][ T9222] loop4: detected capacity change from 0 to 2048 [ 99.523695][ T9222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.574309][ T9230] vhci_hcd: invalid port number 249 [ 99.579985][ T9230] vhci_hcd: default hub control req: 4018 v000e i00f9 l0 [ 99.716917][ T9249] netlink: 'syz.3.2536': attribute type 10 has an invalid length. [ 99.728311][ T9249] team0: Device hsr_slave_0 failed to register rx_handler [ 99.797961][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 99.797979][ T29] audit: type=1326 audit(1745429788.329:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 99.867911][ T29] audit: type=1326 audit(1745429788.329:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 99.870243][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.892257][ T29] audit: type=1326 audit(1745429788.329:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 99.892286][ T29] audit: type=1326 audit(1745429788.329:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 99.954402][ T29] audit: type=1326 audit(1745429788.329:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 99.980182][ T29] audit: type=1326 audit(1745429788.369:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 100.004658][ T29] audit: type=1326 audit(1745429788.369:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 100.029248][ T29] audit: type=1326 audit(1745429788.369:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 100.055594][ T29] audit: type=1326 audit(1745429788.369:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 100.081997][ T29] audit: type=1326 audit(1745429788.369:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.8.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d012e969 code=0x7ffc0000 [ 100.177135][ T9267] loop3: detected capacity change from 0 to 512 [ 100.217475][ T9267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.264336][ T9267] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.311187][ T9290] loop7: detected capacity change from 0 to 2048 [ 100.320734][ T9267] EXT4-fs (loop3): shut down requested (0) [ 100.334965][ T10] kernel write not supported for file /1112/loginuid (pid: 10 comm: kworker/0:1) [ 100.356977][ T9290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.411996][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.505905][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 100.542480][ T9312] IPVS: Error joining to the multicast group [ 100.648496][ T9323] loop6: detected capacity change from 0 to 2048 [ 100.716024][ T9330] netlink: 'syz.3.2572': attribute type 3 has an invalid length. [ 100.825535][ T9323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.840889][ T9323] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.873150][ T9323] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2569: bg 0: block 345: padding at end of block bitmap is not set [ 100.893216][ T8712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.912994][ T9323] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 100.926665][ T9323] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.926665][ T9323] [ 100.970986][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2576'. [ 101.008729][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.167048][ T9365] loop3: detected capacity change from 0 to 2048 [ 101.190196][ T9371] loop4: detected capacity change from 0 to 2048 [ 101.198429][ T9365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.238648][ T9371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.284587][ T9371] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.311325][ T9371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2589: bg 0: block 345: padding at end of block bitmap is not set [ 101.333999][ T9371] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 101.347878][ T9371] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.347878][ T9371] [ 101.373413][ T9382] loop7: detected capacity change from 0 to 512 [ 101.406080][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.693363][ T9397] loop8: detected capacity change from 0 to 8192 [ 101.705860][ T9397] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 101.728541][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.903396][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 101.960830][ T9409] macvtap0: entered promiscuous mode [ 101.976121][ T9409] macvtap0: left promiscuous mode [ 102.132279][ T9429] loop3: detected capacity change from 0 to 2048 [ 102.155962][ T9429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.223037][ T9438] netlink: 'syz.7.2620': attribute type 1 has an invalid length. [ 102.445202][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.461119][ T9456] loop4: detected capacity change from 0 to 1024 [ 102.489166][ T9456] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.501470][ T9456] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.538938][ T9456] JBD2: no valid journal superblock found [ 102.545314][ T9456] EXT4-fs (loop4): Could not load journal inode [ 102.564641][ T9456] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 102.819383][ T2969] IPVS: starting estimator thread 0... [ 102.895158][ T9485] Invalid ELF header magic: != ELF [ 102.906695][ T9483] loop8: detected capacity change from 0 to 2048 [ 102.907033][ T9477] IPVS: using max 2400 ests per chain, 120000 per kthread [ 102.938040][ T9483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.297442][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.434554][ T9519] xt_hashlimit: max too large, truncated to 1048576 [ 103.712792][ T9547] loop4: detected capacity change from 0 to 1024 [ 103.738389][ T9547] EXT4-fs: Ignoring removed i_version option [ 103.746152][ T9547] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 103.798038][ T9547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.953241][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.106489][ T9574] syz.4.2689: attempt to access beyond end of device [ 104.106489][ T9574] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.323701][ T9592] ipvlan2: entered promiscuous mode [ 104.336649][ T9592] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.368496][ T9592] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.584248][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.594183][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.604604][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.613638][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.622227][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.631674][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.640540][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.649821][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.657897][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.667082][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.675195][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.683270][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.691548][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.700426][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.709065][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.718393][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.727196][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.736195][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.744379][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.752423][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.760669][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.768943][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.777016][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.784951][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.792956][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.800839][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.808972][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.817422][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.825383][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.833637][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.841906][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.850266][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.858250][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.866309][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.874260][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.882303][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.890272][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 104.910794][ T3383] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.983704][ T9614] vhci_hcd: invalid port number 15 [ 104.989318][ T9614] vhci_hcd: invalid port number 15 [ 105.040514][ T9623] syz.3.2696: attempt to access beyond end of device [ 105.040514][ T9623] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.101468][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 105.101486][ T29] audit: type=1326 audit(1745429793.639:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.134559][ T29] audit: type=1326 audit(1745429793.639:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.227080][ T29] audit: type=1326 audit(1745429793.649:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.252123][ T29] audit: type=1326 audit(1745429793.649:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.276940][ T29] audit: type=1326 audit(1745429793.649:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.304676][ T29] audit: type=1326 audit(1745429793.649:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.330667][ T29] audit: type=1326 audit(1745429793.649:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.357879][ T29] audit: type=1326 audit(1745429793.649:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.361845][ T9647] loop4: detected capacity change from 0 to 512 [ 105.383899][ T29] audit: type=1326 audit(1745429793.649:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.419009][ T29] audit: type=1326 audit(1745429793.719:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb425e5e969 code=0x7ffc0000 [ 105.492574][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2716'. [ 105.529328][ T9647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.561354][ T9647] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.638464][ T9658] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 105.736586][ T9666] syz.8.2723: attempt to access beyond end of device [ 105.736586][ T9666] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.959897][ T9206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.129412][ T9688] loop6: detected capacity change from 0 to 512 [ 106.149440][ T8826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.174134][ T9688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.209144][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 106.233159][ T9688] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.265598][ T9700] netlink: 'syz.7.2739': attribute type 1 has an invalid length. [ 106.312147][ T8826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.389386][ T8826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.448076][ T8826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.466388][ T7876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.543925][ T8826] bridge_slave_1: left allmulticast mode [ 106.552669][ T8826] bridge_slave_1: left promiscuous mode [ 106.561374][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.574142][ T8826] bridge_slave_0: left allmulticast mode [ 106.581633][ T8826] bridge_slave_0: left promiscuous mode [ 106.587925][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.679622][ T8826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.691152][ T8826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.702355][ T8826] bond0 (unregistering): Released all slaves [ 106.719340][ T9697] chnl_net:caif_netlink_parms(): no params data found [ 106.758919][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.766594][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.777410][ T9697] bridge_slave_0: entered allmulticast mode [ 106.784963][ T9697] bridge_slave_0: entered promiscuous mode [ 106.793800][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.801905][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.812301][ T9697] bridge_slave_1: entered allmulticast mode [ 106.820143][ T9697] bridge_slave_1: entered promiscuous mode [ 106.836882][ T8826] hsr_slave_0: left promiscuous mode [ 106.843478][ T8826] hsr_slave_1: left promiscuous mode [ 106.851467][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.860617][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.873568][ T8826] batadv_slave_0: left allmulticast mode [ 106.879601][ T8826] veth1_macvtap: left promiscuous mode [ 106.885659][ T8826] veth0_macvtap: left promiscuous mode [ 106.892757][ T8826] veth1_vlan: left promiscuous mode [ 106.898879][ T8826] veth0_vlan: left promiscuous mode [ 106.963536][ T8826] team0 (unregistering): Port device team_slave_1 removed [ 106.980472][ T8826] team0 (unregistering): Port device team_slave_0 removed [ 107.018974][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.030458][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.052364][ T9697] team0: Port device team_slave_0 added [ 107.059757][ T9697] team0: Port device team_slave_1 added [ 107.080969][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.088928][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.120765][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.134069][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.141615][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.170263][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.197586][ T9697] hsr_slave_0: entered promiscuous mode [ 107.206056][ T9697] hsr_slave_1: entered promiscuous mode [ 107.213388][ T9697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.221251][ T9697] Cannot create hsr debugfs directory [ 107.289548][ T9697] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 107.300302][ T9697] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 107.309843][ T9697] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 107.319788][ T9697] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 107.331299][ T8826] IPVS: stop unused estimator thread 0... [ 107.346571][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.354499][ T9697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.363025][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.373207][ T9697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.411499][ T781] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.427742][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.449718][ T781] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.467294][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.476178][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.491755][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.503452][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.511651][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.524928][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.533189][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.546257][ T781] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.605128][ T781] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.628947][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.672725][ T781] bridge_slave_1: left allmulticast mode [ 107.678776][ T781] bridge_slave_1: left promiscuous mode [ 107.684742][ T781] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.693169][ T781] bridge_slave_0: left allmulticast mode [ 107.699141][ T781] bridge_slave_0: left promiscuous mode [ 107.705266][ T781] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.818227][ T781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.829605][ T781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.839955][ T781] bond0 (unregistering): Released all slaves [ 107.908529][ T781] hsr_slave_0: left promiscuous mode [ 107.916740][ T781] hsr_slave_1: left promiscuous mode [ 107.922965][ T781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.931776][ T781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.940825][ T781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.953075][ T781] veth1_macvtap: left promiscuous mode [ 107.959880][ T781] veth0_macvtap: left promiscuous mode [ 107.967317][ T781] veth1_vlan: left promiscuous mode [ 107.974181][ T781] veth0_vlan: left promiscuous mode [ 108.050102][ T781] team0 (unregistering): Port device team_slave_1 removed [ 108.061584][ T781] team0 (unregistering): Port device team_slave_0 removed [ 108.071629][ T8834] smc: removing ib device syz! [ 108.103074][ T9697] veth0_vlan: entered promiscuous mode [ 108.126505][ T9697] veth1_vlan: entered promiscuous mode [ 108.143417][ T9697] veth0_macvtap: entered promiscuous mode [ 108.158387][ T9697] veth1_macvtap: entered promiscuous mode [ 108.170070][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.181166][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.191534][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.202196][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.212689][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.223561][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.234388][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.246501][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.257618][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.266545][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.278062][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.288712][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.301885][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.313585][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.328445][ T9697] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.337740][ T9697] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.347206][ T9697] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.358034][ T9697] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.408553][ T9741] loop7: detected capacity change from 0 to 512 [ 108.427796][ T9741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.444829][ T9741] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.565035][ T781] IPVS: stop unused estimator thread 0... [ 108.607047][ T9744] chnl_net:caif_netlink_parms(): no params data found [ 108.654267][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.661769][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.669817][ T9744] bridge_slave_0: entered allmulticast mode [ 108.676741][ T9744] bridge_slave_0: entered promiscuous mode [ 108.683762][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.691268][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.699800][ T9744] bridge_slave_1: entered allmulticast mode [ 108.707402][ T9744] bridge_slave_1: entered promiscuous mode [ 108.727114][ T9744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.738866][ T9744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.759591][ T9744] team0: Port device team_slave_0 added [ 108.766834][ T9744] team0: Port device team_slave_1 added [ 108.783269][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.791036][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.819609][ T9744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.831531][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.831969][ T9753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.838772][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.876065][ T9744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.899762][ T8824] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.938684][ T9744] hsr_slave_0: entered promiscuous mode [ 108.948997][ T9744] hsr_slave_1: entered promiscuous mode [ 108.955489][ T9744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.963743][ T9744] Cannot create hsr debugfs directory [ 108.972677][ T8824] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.037068][ T8824] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.130125][ T8824] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.259886][ T9790] bond1: entered promiscuous mode [ 109.265488][ T9790] bond1: entered allmulticast mode [ 109.281509][ T9790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.308174][ T9790] bond1 (unregistering): Released all slaves [ 109.359997][ T8824] bridge_slave_1: left allmulticast mode [ 109.366113][ T8824] bridge_slave_1: left promiscuous mode [ 109.371902][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.381566][ T8824] bridge_slave_0: left allmulticast mode [ 109.387435][ T8824] bridge_slave_0: left promiscuous mode [ 109.394495][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.569889][ T8824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.587396][ T8824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.599780][ T8824] bond0 (unregistering): Released all slaves [ 109.650398][ T9821] bond1: entered promiscuous mode [ 109.655598][ T9821] bond1: entered allmulticast mode [ 109.661748][ T9821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.681964][ T9821] bond1 (unregistering): Released all slaves [ 109.707847][ T8824] hsr_slave_0: left promiscuous mode [ 109.716438][ T8824] hsr_slave_1: left promiscuous mode [ 109.722684][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.730950][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.739968][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.747902][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.763606][ T8824] veth1_macvtap: left promiscuous mode [ 109.769557][ T8824] veth0_macvtap: left promiscuous mode [ 109.776195][ T8824] veth1_vlan: left promiscuous mode [ 109.795680][ T8824] veth0_vlan: left promiscuous mode [ 109.817907][ T9838] loop9: detected capacity change from 0 to 128 [ 109.832272][ T9838] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.875902][ T9838] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.972230][ T9838] EXT4-fs error (device loop9): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.9.2773: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 110.020429][ T8824] team0 (unregistering): Port device team_slave_1 removed [ 110.040911][ T8824] team0 (unregistering): Port device team_slave_0 removed [ 110.061868][ T9697] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.155048][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 110.182126][ T9744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.210546][ T9858] bond1: entered promiscuous mode [ 110.216343][ T9858] bond1: entered allmulticast mode [ 110.222127][ T9858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.232663][ T9858] bond1 (unregistering): Released all slaves [ 110.257974][ T9744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.288911][ T9744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.312707][ T9744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.327336][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.335647][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.353656][ T9768] bridge_slave_0: entered allmulticast mode [ 110.368921][ T9768] bridge_slave_0: entered promiscuous mode [ 110.398834][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.406388][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.420418][ T9768] bridge_slave_1: entered allmulticast mode [ 110.427654][ T9768] bridge_slave_1: entered promiscuous mode [ 110.476518][ T9744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.489170][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.509995][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 110.510011][ T29] audit: type=1326 audit(1745429799.039:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.540831][ T29] audit: type=1326 audit(1745429799.039:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.568509][ T29] audit: type=1326 audit(1745429799.079:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.595730][ T29] audit: type=1326 audit(1745429799.079:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.622588][ T29] audit: type=1326 audit(1745429799.079:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.647347][ T29] audit: type=1326 audit(1745429799.079:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.671321][ T29] audit: type=1326 audit(1745429799.079:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.695291][ T29] audit: type=1326 audit(1745429799.079:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.696571][ T9744] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.722965][ T29] audit: type=1326 audit(1745429799.089:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.756132][ T29] audit: type=1326 audit(1745429799.129:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 110.788962][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.813586][ T9768] team0: Port device team_slave_0 added [ 110.828226][ T9768] team0: Port device team_slave_1 added [ 110.849688][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.857189][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.886475][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.893485][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.920629][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.989526][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.997778][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.025118][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.040820][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.048470][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.111567][ T9744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.123397][ T9744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.146844][ T9768] hsr_slave_0: entered promiscuous mode [ 111.154585][ T9768] hsr_slave_1: entered promiscuous mode [ 111.271290][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.453026][ T9744] veth0_vlan: entered promiscuous mode [ 111.465483][ T9744] veth1_vlan: entered promiscuous mode [ 111.490767][ T9768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.502983][ T9768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.516604][ T9768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.527543][ T9768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.557133][ T9744] veth0_macvtap: entered promiscuous mode [ 111.568377][ T9744] veth1_macvtap: entered promiscuous mode [ 111.582401][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.595485][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.607231][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.619028][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.632093][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.644875][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.656300][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.672498][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.686853][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.708084][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.721306][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.739316][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.756522][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.772804][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.787558][ T9744] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.802569][ T9744] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.815361][ T9744] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.826545][ T9744] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.846807][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.872629][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.887698][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.896177][ T8842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.910750][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.918633][ T8842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.006531][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.112189][ T9768] veth0_vlan: entered promiscuous mode [ 112.121343][ T9768] veth1_vlan: entered promiscuous mode [ 112.137221][ T9768] veth0_macvtap: entered promiscuous mode [ 112.145454][ T9768] veth1_macvtap: entered promiscuous mode [ 112.157250][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.168276][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.178568][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.190274][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.201395][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.214272][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.225232][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.238767][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.250590][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.265124][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.280887][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.294039][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.306168][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.317542][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.330281][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.343265][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.355564][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.369468][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.380797][ T9768] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.392393][ T9768] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.402613][ T9768] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.413758][ T9768] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.506593][ T9948] SELinux: ebitmap: truncated map [ 112.512942][ T9948] SELinux: failed to load policy [ 112.633601][ T9965] batadv_slave_0: entered promiscuous mode [ 112.641258][ T9964] batadv_slave_0: left promiscuous mode [ 112.749930][ T9980] loop7: detected capacity change from 0 to 512 [ 112.758044][ T9980] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 112.784613][ T9980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 112.823899][ T9980] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.2819: corrupted in-inode xattr: e_value size too large [ 112.839088][ T9991] vhci_hcd: invalid port number 65 [ 112.844654][ T9991] vhci_hcd: invalid port number 65 [ 112.844914][ T9988] SELinux: ebitmap: truncated map [ 112.858977][ T9988] SELinux: failed to load policy [ 112.868757][ T9980] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2819: couldn't read orphan inode 15 (err -117) [ 112.883903][ T9980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.974747][ T9768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.705723][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 113.713614][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 113.722176][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.730072][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.738031][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.745836][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.753571][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.761345][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.769160][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.777011][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.784726][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.792497][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.800303][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.808227][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.816358][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.824175][ T2969] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 113.832466][ T2969] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.022421][T10111] loop6: detected capacity change from 0 to 128 [ 114.039158][T10111] syz.6.2880: attempt to access beyond end of device [ 114.039158][T10111] loop6: rw=2049, sector=145, nr_sectors = 34 limit=128 [ 114.088003][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.105309][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.112001][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.119736][T10117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 114.139592][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.159451][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.167775][T10123] netlink: 'syz.8.2886': attribute type 6 has an invalid length. [ 114.176163][T10123] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.185133][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.191646][T10127] loop7: detected capacity change from 0 to 512 [ 114.192370][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.207296][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.217548][T10127] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.219510][T10117] dummy0 speed is unknown, defaulting to 1000 [ 114.227342][T10127] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 114.268000][T10127] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 114.273972][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2891'. [ 114.319939][T10127] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 114.330052][T10127] System zones: 0-2, 18-18, 34-35 [ 114.336546][T10127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.374250][T10127] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.406148][T10127] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 114.418235][T10127] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 114.418268][T10127] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.428011][T10127] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2888: bg 0: block 353: padding at end of block bitmap is not set [ 114.490690][T10152] dummy0 speed is unknown, defaulting to 1000 [ 114.518443][ T9768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.579992][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2902'. [ 114.786473][T10187] loop8: detected capacity change from 0 to 512 [ 114.801503][T10187] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.818424][T10187] EXT4-fs (loop8): 1 truncate cleaned up [ 114.826126][T10187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.872126][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.003336][T10217] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 115.026828][T10221] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2929'. [ 115.053920][T10221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2929'. [ 115.540062][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 115.540078][ T29] audit: type=1400 audit(1745429804.069:1363): avc: denied { create } for pid=10280 comm="syz.9.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.580526][ T29] audit: type=1400 audit(1745429804.099:1364): avc: denied { connect } for pid=10280 comm="syz.9.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.602186][ T29] audit: type=1400 audit(1745429804.099:1365): avc: denied { name_connect } for pid=10280 comm="syz.9.2952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.626274][ T29] audit: type=1400 audit(1745429804.109:1366): avc: denied { listen } for pid=10280 comm="syz.9.2952" lport=46817 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.656903][ T29] audit: type=1400 audit(1745429804.109:1367): avc: denied { accept } for pid=10280 comm="syz.9.2952" lport=46817 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.682518][ T29] audit: type=1400 audit(1745429804.109:1368): avc: denied { getopt } for pid=10280 comm="syz.9.2952" lport=46817 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.730486][T10287] SELinux: failed to load policy [ 115.730503][ T29] audit: type=1400 audit(1745429804.259:1369): avc: denied { load_policy } for pid=10286 comm="syz.7.2954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.961320][ T29] audit: type=1400 audit(1745429804.489:1370): avc: denied { getopt } for pid=10305 comm="syz.3.2964" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.997837][ T29] audit: type=1400 audit(1745429804.539:1371): avc: denied { mounton } for pid=10304 comm="syz.7.2965" path="/27/bus" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.028716][ T29] audit: type=1326 audit(1745429804.559:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e79e969 code=0x7ffc0000 [ 116.129905][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2971'. [ 116.545384][T10396] netlink: 'syz.6.3007': attribute type 3 has an invalid length. [ 116.565673][T10393] loop9: detected capacity change from 0 to 2048 [ 116.589000][T10401] loop7: detected capacity change from 0 to 164 [ 116.603635][T10401] Unable to read rock-ridge attributes [ 116.604136][T10393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.611596][T10401] Unable to read rock-ridge attributes [ 116.632202][T10393] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.645700][T10401] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.673480][T10393] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3006: bg 0: block 345: padding at end of block bitmap is not set [ 116.693500][T10393] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 116.707311][T10393] EXT4-fs (loop9): This should not happen!! Data will be lost [ 116.707311][T10393] [ 116.737667][T10411] loop6: detected capacity change from 0 to 1024 [ 116.761946][ T9697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.773848][T10411] EXT4-fs: Ignoring removed orlov option [ 116.798136][T10411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.214792][T10457] SELinux: syz.8.3035 (10457) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.451725][T10484] hsr0: entered promiscuous mode [ 117.557851][T10494] loop8: detected capacity change from 0 to 512 [ 117.584628][ T9744] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.584976][T10494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.609062][T10494] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.651832][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.707081][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3058'. [ 117.768921][T10514] loop8: detected capacity change from 0 to 1024 [ 117.778689][T10516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10516 comm=syz.3.3062 [ 117.791557][T10516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10516 comm=syz.3.3062 [ 117.799321][T10514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.825804][T10514] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.848316][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.570858][T10566] loop7: detected capacity change from 0 to 512 [ 118.627427][T10566] EXT4-fs (loop7): too many log groups per flexible block group [ 118.637616][T10566] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 118.659222][T10566] EXT4-fs (loop7): mount failed [ 118.683267][T10566] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3083'. [ 118.692733][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3083'. [ 118.702481][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3083'. [ 118.811632][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 118.852175][T10582] loop3: detected capacity change from 0 to 1024 [ 118.882997][T10585] SELinux: policydb version 0 does not match my version range 15-34 [ 118.894360][T10585] SELinux: failed to load policy [ 118.919906][T10582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.941428][T10595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.979503][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.059595][T10608] netlink: 'syz.9.3100': attribute type 6 has an invalid length. [ 119.067831][T10608] netlink: 'syz.9.3100': attribute type 5 has an invalid length. [ 119.076765][T10608] netlink: 'syz.9.3100': attribute type 4 has an invalid length. [ 119.085699][T10608] netlink: 'syz.9.3100': attribute type 6 has an invalid length. [ 119.139795][T10618] netlink: 'syz.3.3106': attribute type 3 has an invalid length. [ 119.172544][T10622] SELinux: policydb version 0 does not match my version range 15-34 [ 119.181632][T10622] SELinux: failed to load policy [ 119.213824][T10624] loop8: detected capacity change from 0 to 1024 [ 119.223339][T10624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.251234][ T8920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.283146][T10631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.317579][T10635] loop6: detected capacity change from 0 to 128 [ 119.332763][T10634] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 119.340976][T10634] FAT-fs (loop6): Filesystem has been set read-only [ 119.349663][T10634] syz.6.3123: attempt to access beyond end of device [ 119.349663][T10634] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 119.364682][T10634] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 119.372810][T10634] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 119.372870][T10639] __nla_validate_parse: 4 callbacks suppressed [ 119.372890][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3114'. [ 119.399043][T10639] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3114'. [ 119.409519][T10639] netlink: 'syz.8.3114': attribute type 6 has an invalid length. [ 119.417747][T10639] netlink: 'syz.8.3114': attribute type 5 has an invalid length. [ 119.427151][T10639] netlink: 'syz.8.3114': attribute type 4 has an invalid length. [ 119.429426][T10634] syz.6.3123: attempt to access beyond end of device [ 119.429426][T10634] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.435512][T10639] netlink: 'syz.8.3114': attribute type 6 has an invalid length. [ 119.435530][T10639] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3114'. [ 119.474398][T10634] syz.6.3123: attempt to access beyond end of device [ 119.474398][T10634] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.488663][T10634] syz.6.3123: attempt to access beyond end of device [ 119.488663][T10634] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.511545][T10635] syz.6.3123: attempt to access beyond end of device [ 119.511545][T10635] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.525198][T10635] syz.6.3123: attempt to access beyond end of device [ 119.525198][T10635] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.539013][T10635] syz.6.3123: attempt to access beyond end of device [ 119.539013][T10635] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.552849][T10635] syz.6.3123: attempt to access beyond end of device [ 119.552849][T10635] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.617062][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3117'. [ 119.649439][T10653] netlink: 'syz.8.3118': attribute type 3 has an invalid length. [ 119.683001][T10655] loop3: detected capacity change from 0 to 2048 [ 119.710337][T10655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.723760][T10655] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.751592][T10655] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3120: bg 0: block 345: padding at end of block bitmap is not set [ 119.783057][T10655] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 119.796921][T10655] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.796921][T10655] [ 119.811121][T10667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.822301][T10667] batadv_slave_0: entered promiscuous mode [ 119.843814][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.934139][T10684] loop3: detected capacity change from 0 to 512 [ 119.978622][T10684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.014197][T10684] ext4 filesystem being mounted at /673/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.017729][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3151'. [ 120.064610][T10703] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3144'. [ 120.074783][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.177233][T10709] infiniband syz!: set active [ 120.182034][T10709] infiniband syz!: added team_slave_0 [ 120.190260][T10717] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 120.200699][T10709] RDS/IB: syz!: added [ 120.212676][T10709] smc: adding ib device syz! with port count 1 [ 120.235593][T10709] smc: ib device syz! port 1 has pnetid [ 120.614813][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 120.614843][ T29] audit: type=1400 audit(1745429809.139:1493): avc: denied { shutdown } for pid=10729 comm="syz.3.3156" laddr=fe80::13 lport=43674 faddr=fc01::fc fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.677794][ T29] audit: type=1400 audit(1745429809.189:1494): avc: denied { getopt } for pid=10729 comm="syz.3.3156" laddr=fe80::13 lport=43674 faddr=fc01::fc fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.703091][ T29] audit: type=1326 audit(1745429809.189:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.6.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b102ee969 code=0x7ffc0000 [ 120.729731][ T29] audit: type=1326 audit(1745429809.189:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.6.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b102ee969 code=0x7ffc0000 [ 120.755662][ T29] audit: type=1326 audit(1745429809.189:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.6.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f1b102ee969 code=0x7ffc0000 [ 120.781886][ T29] audit: type=1326 audit(1745429809.189:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.6.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b102ee969 code=0x7ffc0000 [ 120.846063][T10728] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.927631][T10742] loop3: detected capacity change from 0 to 8192 [ 120.953451][T10742] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.982237][ T29] audit: type=1400 audit(1745429809.499:1499): avc: denied { watch } for pid=10741 comm="syz.3.3162" path="/681/file2" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 121.007997][ T29] audit: type=1326 audit(1745429809.539:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.7.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b6ee969 code=0x7ffc0000 [ 121.032588][ T29] audit: type=1326 audit(1745429809.539:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.7.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b6ee969 code=0x7ffc0000 [ 121.062360][ T29] audit: type=1326 audit(1745429809.539:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.7.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fe37b6ee969 code=0x7ffc0000 [ 121.153086][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3167'. [ 121.190935][T10765] netlink: 'syz.8.3174': attribute type 3 has an invalid length. [ 121.432839][T10796] netlink: 'syz.3.3190': attribute type 298 has an invalid length. [ 121.491361][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3201'. [ 121.535682][T10804] IPVS: Error joining to the multicast group [ 121.669005][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3207'. [ 121.688475][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3207'. [ 122.185614][T10871] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 122.246996][T10873] loop3: detected capacity change from 0 to 164 [ 122.265234][T10873] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.300154][T10873] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.421611][T10886] loop7: detected capacity change from 0 to 16384 [ 122.715709][T10905] rdma_op ffff888132cda980 conn xmit_rdma 0000000000000000 [ 122.857400][T10925] syz!: rxe_newlink: already configured on team_slave_0 [ 122.934635][T10935] loop9: detected capacity change from 0 to 1024 [ 122.967377][T10935] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.982849][T10935] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.023166][ T9697] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /90/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 123.050354][T10954] loop3: detected capacity change from 0 to 256 [ 123.093192][ T9697] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /90/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 123.103121][T10946] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 123.145916][ T9697] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 123.188457][ T9697] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /90/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 123.225471][ T9697] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 123.251935][ T9697] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /90/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 123.253855][T10967] loop7: detected capacity change from 0 to 764 [ 123.283873][ T9697] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 123.303639][ T9697] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /90/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 123.333183][ T9697] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 123.463672][T10985] IPv6: Can't replace route, no match found [ 123.492835][ T3293] ================================================================== [ 123.500979][ T3293] BUG: KCSAN: data-race in do_select / pollwake [ 123.507247][ T3293] [ 123.509571][ T3293] write to 0xffffc900015679d0 of 4 bytes by task 8920 on cpu 1: [ 123.517210][ T3293] pollwake+0xc1/0x110 [ 123.521296][ T3293] __wake_up_sync_key+0x51/0x80 [ 123.526251][ T3293] anon_pipe_write+0x9df/0xb10 [ 123.531043][ T3293] vfs_write+0x79b/0x950 [ 123.535561][ T3293] ksys_write+0xeb/0x1b0 [ 123.539902][ T3293] __x64_sys_write+0x42/0x50 [ 123.544515][ T3293] x64_sys_call+0x2a45/0x2e10 [ 123.549311][ T3293] do_syscall_64+0xc9/0x1a0 [ 123.554018][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.559953][ T3293] [ 123.562303][ T3293] read to 0xffffc900015679d0 of 4 bytes by task 3293 on cpu 0: [ 123.569853][ T3293] do_select+0xeba/0xfc0 [ 123.574125][ T3293] core_sys_select+0x4c3/0x6d0 [ 123.578910][ T3293] __se_sys_pselect6+0x212/0x270 [ 123.583868][ T3293] __x64_sys_pselect6+0x78/0x90 [ 123.588735][ T3293] x64_sys_call+0x1c26/0x2e10 [ 123.593438][ T3293] do_syscall_64+0xc9/0x1a0 [ 123.597968][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.603890][ T3293] [ 123.606328][ T3293] value changed: 0x00000000 -> 0x00000001 [ 123.612227][ T3293] [ 123.614559][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 123.620734][ T3293] CPU: 0 UID: 0 PID: 3293 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 123.633344][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.643421][ T3293] ================================================================== [ 123.748630][ T9697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.762966][ T8823] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.808858][ T8823] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.859213][ T8823] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.918232][ T8823] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.993522][ T8823] bridge_slave_1: left allmulticast mode [ 123.999355][ T8823] bridge_slave_1: left promiscuous mode [ 124.005031][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.027378][ T8823] bridge_slave_0: left allmulticast mode [ 124.033154][ T8823] bridge_slave_0: left promiscuous mode [ 124.038931][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.148211][ T8823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.160132][ T8823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.170335][ T8823] bond0 (unregistering): Released all slaves [ 124.241478][ T8823] hsr_slave_0: left promiscuous mode [ 124.248848][ T8823] hsr_slave_1: left promiscuous mode [ 124.265441][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.272967][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.280614][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.288214][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.300377][ T8823] veth1_macvtap: left promiscuous mode [ 124.306115][ T8823] veth0_macvtap: left promiscuous mode [ 124.311649][ T8823] veth1_vlan: left promiscuous mode [ 124.317028][ T8823] veth0_vlan: left promiscuous mode [ 124.387411][ T8823] team0 (unregistering): Port device team_slave_1 removed [ 124.397574][ T8823] team0 (unregistering): Port device team_slave_0 removed