last executing test programs: 44.983868462s ago: executing program 2 (id=1895): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) 44.928882827s ago: executing program 2 (id=1897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 44.813033419s ago: executing program 2 (id=1905): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 43.931667646s ago: executing program 2 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) 43.540300705s ago: executing program 2 (id=1945): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 43.422003747s ago: executing program 2 (id=1947): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x5}], 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) 28.372362965s ago: executing program 32 (id=1947): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x5}], 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) 5.886886708s ago: executing program 3 (id=3131): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0x0, 0x2}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.986882537s ago: executing program 3 (id=3159): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) unshare(0x64000600) 4.85068081s ago: executing program 3 (id=3167): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.691225306s ago: executing program 3 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 4.632404422s ago: executing program 3 (id=3178): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040040) close(r1) 4.518753123s ago: executing program 3 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 4.492025526s ago: executing program 33 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 1.909266902s ago: executing program 6 (id=3182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000140)={0xffff0000, 0x5, 0x2, 0x3, 0x5, "2c4acd254ad3535926f4b966485d7ce20ae079", 0x17, 0x10000}) 1.679821624s ago: executing program 6 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 1.61846736s ago: executing program 6 (id=3218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.320273759s ago: executing program 4 (id=3229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000034d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.265560645s ago: executing program 4 (id=3230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) symlink(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.211396261s ago: executing program 4 (id=3231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) poll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x7981) syz_open_pts(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.11730135s ago: executing program 4 (id=3232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) 1.073868024s ago: executing program 4 (id=3233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 998.513591ms ago: executing program 6 (id=3234): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 642.494566ms ago: executing program 4 (id=3238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) open(0x0, 0xe180, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 632.874428ms ago: executing program 1 (id=3239): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) 549.667466ms ago: executing program 5 (id=3240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 496.049001ms ago: executing program 5 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 481.494643ms ago: executing program 1 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002"], 0xa4}}, 0x0) 438.176557ms ago: executing program 0 (id=3245): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000900850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 434.298287ms ago: executing program 1 (id=3246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000140)={0xffff0000, 0x5, 0x2, 0x3, 0x5, "2c4acd254ad3535926f4b966485d7ce20ae079", 0x17, 0x10000}) 429.239858ms ago: executing program 5 (id=3247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r2) 401.41968ms ago: executing program 5 (id=3248): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffa000/0x3000)=nil, 0x0) 380.262913ms ago: executing program 0 (id=3249): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 378.180362ms ago: executing program 6 (id=3250): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) 372.617363ms ago: executing program 5 (id=3251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 342.840336ms ago: executing program 5 (id=3252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 313.044559ms ago: executing program 0 (id=3253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x4000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 255.227895ms ago: executing program 0 (id=3254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 167.161154ms ago: executing program 1 (id=3255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 129.125347ms ago: executing program 0 (id=3256): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 51.236015ms ago: executing program 1 (id=3257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 44.044486ms ago: executing program 6 (id=3258): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x14c6f85cc8790d39) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) 3.01068ms ago: executing program 0 (id=3268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 1 (id=3269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@loopback, 0x2b, r3}) kernel console output (not intermixed with test programs): detected capacity change from 0 to 8192 [ 65.318743][ T6255] loop3: p1 p2 p4 < > [ 65.320967][ T6262] loop2: detected capacity change from 0 to 1024 [ 65.322897][ T6255] loop3: partition table partially beyond EOD, truncated [ 65.349853][ T6255] loop3: p1 start 16777216 is beyond EOD, truncated [ 65.357291][ T6255] loop3: p2 size 515840 extends beyond EOD, truncated [ 65.359588][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.385938][ T6255] loop3: p4 start 16777216 is beyond EOD, truncated [ 65.826276][ T6306] loop4: detected capacity change from 0 to 512 [ 65.844955][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.859927][ T6306] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.900630][ T6306] EXT4-fs error (device loop4): ext4_get_first_dir_block:3529: inode #12: comm syz.4.1191: Attempting to read directory block (0) that is past i_size (3) [ 65.942244][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.973522][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.057032][ T6335] loop1: detected capacity change from 0 to 512 [ 66.081561][ T6339] loop3: detected capacity change from 0 to 512 [ 66.111268][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.125438][ T6339] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.148655][ T6335] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.186753][ T6335] EXT4-fs (loop1): mount failed [ 66.271361][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.075436][ T6427] netlink: 'syz.2.1238': attribute type 10 has an invalid length. [ 67.089186][ T6427] team0 (unregistering): Port device team_slave_0 removed [ 67.099385][ T6427] team0 (unregistering): Port device team_slave_1 removed [ 67.288706][ T6434] loop3: detected capacity change from 0 to 512 [ 67.310982][ T6434] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.328017][ T6434] EXT4-fs (loop3): mount failed [ 67.357149][ T6445] loop3: detected capacity change from 0 to 128 [ 67.367772][ T6445] syz.3.1244: attempt to access beyond end of device [ 67.367772][ T6445] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 67.382047][ T6445] syz.3.1244: attempt to access beyond end of device [ 67.382047][ T6445] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 67.395747][ T6445] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 67.405230][ T6445] syz.3.1244: attempt to access beyond end of device [ 67.405230][ T6445] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 67.418736][ T6445] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 67.427538][ T6445] syz.3.1244: attempt to access beyond end of device [ 67.427538][ T6445] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 67.427846][ T6447] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.441820][ T6445] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 67.458178][ T6445] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 67.467449][ T6445] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 67.543171][ T6455] loop4: detected capacity change from 0 to 512 [ 67.549948][ T6455] EXT4-fs: Ignoring removed orlov option [ 67.556084][ T6455] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.566768][ T6455] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1248: corrupted in-inode xattr: e_value size too large [ 67.584145][ T6455] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1248: couldn't read orphan inode 15 (err -117) [ 67.599653][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.674291][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.794092][ T6488] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 67.800659][ T6488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.808265][ T6488] vhci_hcd vhci_hcd.0: Device attached [ 67.815372][ T6489] vhci_hcd: connection closed [ 67.815488][ T3949] vhci_hcd: stop threads [ 67.824609][ T3949] vhci_hcd: release socket [ 67.829265][ T3949] vhci_hcd: disconnect device [ 67.877307][ T6501] loop2: detected capacity change from 0 to 164 [ 67.994789][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 67.994806][ T29] audit: type=1326 audit(1761020323.484:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.048425][ T29] audit: type=1326 audit(1761020323.484:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.072443][ T29] audit: type=1326 audit(1761020323.484:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.101614][ T29] audit: type=1326 audit(1761020323.484:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.130597][ T29] audit: type=1326 audit(1761020323.484:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.155105][ T29] audit: type=1326 audit(1761020323.484:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.178926][ T29] audit: type=1326 audit(1761020323.484:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.203255][ T29] audit: type=1326 audit(1761020323.514:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.227393][ T29] audit: type=1326 audit(1761020323.534:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.253624][ T29] audit: type=1326 audit(1761020323.534:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.2.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f14fe85efc9 code=0x7ffc0000 [ 68.358443][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 68.367752][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 68.427809][ T6526] loop3: detected capacity change from 0 to 2048 [ 68.451524][ T6536] 9pnet_fd: Insufficient options for proto=fd [ 68.465294][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.485962][ T6526] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.545968][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.717451][ T6572] loop2: detected capacity change from 0 to 2048 [ 68.735860][ T6575] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.765283][ T6572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.792666][ T6572] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.839709][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.957219][ T6610] loop3: detected capacity change from 0 to 2048 [ 68.966269][ T6610] EXT4-fs: Ignoring removed bh option [ 68.994199][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.029039][ T6610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.061799][ T6610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 69.074997][ T6610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.074997][ T6610] [ 69.075417][ T6635] loop4: detected capacity change from 0 to 164 [ 69.085462][ T6610] EXT4-fs (loop3): Total free blocks count 0 [ 69.097848][ T6610] EXT4-fs (loop3): Free/Dirty block details [ 69.098089][ T6636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.103861][ T6610] EXT4-fs (loop3): free_blocks=2415919104 [ 69.116147][ T6636] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.116147][ T6636] [ 69.121887][ T6610] EXT4-fs (loop3): dirty_blocks=48 [ 69.121905][ T6610] EXT4-fs (loop3): Block reservation details [ 69.133647][ T6635] ISOFS: unable to read i-node block [ 69.284366][ T6657] loop3: detected capacity change from 0 to 4096 [ 69.293855][ T6657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.306052][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.340463][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.137655][ T6701] Invalid ELF header magic: != ELF [ 70.198442][ T6713] netlink: 'syz.0.1354': attribute type 2 has an invalid length. [ 70.206271][ T6713] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1354'. [ 70.486942][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 70.538871][ T6753] xt_hashlimit: max too large, truncated to 1048576 [ 70.543764][ T6750] SELinux: failed to load policy [ 70.576800][ T6753] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.703987][ T6779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.749702][ T6786] loop2: detected capacity change from 0 to 2048 [ 70.756775][ T6786] EXT4-fs: Ignoring removed bh option [ 70.772438][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.796636][ T6786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.853558][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.154032][ T6815] loop2: detected capacity change from 0 to 512 [ 71.180251][ T6815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 71.190032][ T6815] EXT4-fs (loop2): invalid journal inode [ 71.195818][ T6815] EXT4-fs (loop2): can't get journal size [ 71.202569][ T6815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 71.210966][ T6815] System zones: 1-12, 13-13 [ 71.217120][ T6819] loop3: detected capacity change from 0 to 1024 [ 71.230747][ T6815] EXT4-fs (loop2): 1 truncate cleaned up [ 71.234424][ T6819] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.237141][ T6815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.247987][ T6819] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.290610][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.296739][ T6819] JBD2: no valid journal superblock found [ 71.305541][ T6819] EXT4-fs (loop3): Could not load journal inode [ 71.323721][ T6819] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 71.537371][ T6838] loop2: detected capacity change from 0 to 512 [ 71.615967][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.649226][ T6838] ext4 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.688996][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.698463][ T6849] loop4: detected capacity change from 0 to 512 [ 71.707341][ T6849] EXT4-fs: Ignoring removed oldalloc option [ 71.723842][ T6849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.737115][ T6849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.818945][ T6849] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.832342][ T6849] EXT4-fs (loop4): 1 truncate cleaned up [ 71.838655][ T6849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.884779][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.057090][ T6905] Invalid ELF header magic: != ELF [ 72.063164][ T6903] loop4: detected capacity change from 0 to 2048 [ 72.096681][ T6903] EXT4-fs: Ignoring removed bh option [ 72.131824][ T6903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.150916][ T6903] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.168916][ T6903] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 72.181663][ T6903] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.181663][ T6903] [ 72.191652][ T6903] EXT4-fs (loop4): Total free blocks count 0 [ 72.198144][ T6903] EXT4-fs (loop4): Free/Dirty block details [ 72.204854][ T6903] EXT4-fs (loop4): free_blocks=2415919104 [ 72.211048][ T6903] EXT4-fs (loop4): dirty_blocks=48 [ 72.216973][ T6903] EXT4-fs (loop4): Block reservation details [ 72.223861][ T6903] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 72.299659][ T6921] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.426178][ T3954] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.691929][ T3399] hid_parser_main: 44 callbacks suppressed [ 72.691948][ T3399] hid-generic 0000:0003:0001.0006: unknown main item tag 0x0 [ 72.711367][ T3399] hid-generic 0000:0003:0001.0006: unknown main item tag 0x0 [ 72.722221][ T3399] hid-generic 0000:0003:0001.0006: hidraw0: HID v0.03 Device [syz0] on syz1 [ 73.005137][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 73.005154][ T29] audit: type=1326 audit(1761020328.494:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab12515e67 code=0x7ffc0000 [ 73.046788][ T29] audit: type=1326 audit(1761020328.494:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab124bb099 code=0x7ffc0000 [ 73.046901][ T6972] loop3: detected capacity change from 0 to 2048 [ 73.072432][ T29] audit: type=1326 audit(1761020328.494:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 73.103012][ T29] audit: type=1326 audit(1761020328.504:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab12515e67 code=0x7ffc0000 [ 73.129800][ T29] audit: type=1326 audit(1761020328.504:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab124bb099 code=0x7ffc0000 [ 73.153358][ T29] audit: type=1326 audit(1761020328.504:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 73.177166][ T29] audit: type=1326 audit(1761020328.514:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab12515e67 code=0x7ffc0000 [ 73.200654][ T29] audit: type=1326 audit(1761020328.514:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab124bb099 code=0x7ffc0000 [ 73.225327][ T29] audit: type=1326 audit(1761020328.514:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 73.250176][ T29] audit: type=1326 audit(1761020328.534:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.0.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab12515e67 code=0x7ffc0000 [ 73.288989][ T6972] loop3: p2 < > p4 [ 73.293854][ T6972] loop3: p4 size 262144 extends beyond EOD, truncated [ 73.663035][ T6996] vlan2: entered allmulticast mode [ 73.672250][ T6998] loop2: detected capacity change from 0 to 128 [ 73.684012][ T6998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.696788][ T6998] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.740673][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.368294][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 74.391330][ T7052] bond_slave_0: entered promiscuous mode [ 74.397112][ T7052] bond_slave_1: entered promiscuous mode [ 74.404241][ T7052] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 74.413704][ T7052] bond_slave_0: left promiscuous mode [ 74.419419][ T7052] bond_slave_1: left promiscuous mode [ 74.488466][ T4364] Bluetooth: hci0: command 0x1003 tx timeout [ 74.494561][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.560798][ T7067] binfmt_misc: register: failed to install interpreter file ./file2 [ 74.684447][ T7082] netlink: 'syz.3.1508': attribute type 4 has an invalid length. [ 74.835673][ T7097] loop4: detected capacity change from 0 to 2048 [ 74.858597][ T7095] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.883500][ T7095] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.939849][ T7080] loop1: detected capacity change from 0 to 2048 [ 74.947596][ T7097] loop4: p2 < > p4 [ 74.952856][ T7109] loop3: detected capacity change from 0 to 128 [ 74.959202][ T7097] loop4: p4 size 262144 extends beyond EOD, truncated [ 74.978582][ T7109] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.025610][ T7109] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.027162][ T7080] loop1: p1 < > p4 [ 75.062769][ T7080] loop1: p4 size 8388608 extends beyond EOD, truncated [ 75.099172][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.345147][ T7138] loop4: detected capacity change from 0 to 128 [ 75.354717][ T7138] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.370012][ T7138] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.396432][ T4046] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.456115][ T7140] SELinux: failed to load policy [ 75.552865][ T7152] loop4: detected capacity change from 0 to 2048 [ 75.560023][ T7152] EXT4-fs: Ignoring removed oldalloc option [ 75.571589][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.597581][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 75.667166][ T7166] 9pnet_fd: Insufficient options for proto=fd [ 75.883681][ T7195] loop1: detected capacity change from 0 to 256 [ 75.893084][ T7195] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.950441][ T7203] loop4: detected capacity change from 0 to 1024 [ 75.959206][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 75.962952][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 75.986832][ T7203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 76.148765][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 76.190626][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'. [ 76.200325][ T7227] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 76.208459][ T7227] netlink: 'syz.0.1572': attribute type 2 has an invalid length. [ 76.216592][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1572'. [ 76.322649][ T7240] SELinux: policydb version 4 does not match my version range 15-35 [ 76.349920][ T7240] SELinux: failed to load policy [ 76.698205][ T7288] loop4: detected capacity change from 0 to 512 [ 76.716733][ T7288] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 76.736535][ T7288] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 76.827243][ T7306] loop1: detected capacity change from 0 to 1024 [ 76.834739][ T7306] EXT4-fs: inline encryption not supported [ 76.842088][ T7306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.849832][ T7306] EXT4-fs: Ignoring removed bh option [ 76.870829][ T7306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.898692][ T3954] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 76.906636][ T7315] : renamed from vlan0 (while UP) [ 76.914266][ T7306] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1609: Allocating blocks 385-513 which overlap fs metadata [ 76.940234][ T7305] EXT4-fs (loop1): pa ffff888106e92150: logic 16, phys. 129, len 24 [ 76.948462][ T7305] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 76.993967][ T7326] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1617'. [ 77.031977][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.125326][ T7345] loop1: detected capacity change from 0 to 8192 [ 77.950000][ T7402] netlink: 'syz.0.1648': attribute type 10 has an invalid length. [ 77.950041][ T7402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1648'. [ 77.951266][ T7402] dummy0: left allmulticast mode [ 77.953970][ T7402] team0: Port device dummy0 removed [ 77.954522][ T7402] bridge0: port 4(dummy0) entered blocking state [ 77.954626][ T7402] bridge0: port 4(dummy0) entered disabled state [ 77.955023][ T7402] dummy0: entered allmulticast mode [ 78.264741][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1654'. [ 78.363059][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 78.363077][ T29] audit: type=1326 audit(1761020333.854:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.397061][ T29] audit: type=1326 audit(1761020333.854:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.421210][ T29] audit: type=1326 audit(1761020333.854:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.445213][ T29] audit: type=1326 audit(1761020333.854:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.468989][ T29] audit: type=1326 audit(1761020333.854:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.493182][ T29] audit: type=1326 audit(1761020333.884:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.516977][ T29] audit: type=1326 audit(1761020333.884:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.540691][ T29] audit: type=1326 audit(1761020333.884:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.564383][ T29] audit: type=1326 audit(1761020333.884:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.588755][ T29] audit: type=1326 audit(1761020333.884:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 78.693230][ T7452] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1668'. [ 78.702625][ T7452] !60X: renamed from caif0 [ 78.714104][ T7452] !60X: entered allmulticast mode [ 78.720202][ T7452] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 78.752759][ T7460] loop2: detected capacity change from 0 to 128 [ 79.051819][ T7498] team0: Port device syz_tun added [ 79.167106][ T7508] pimreg: entered allmulticast mode [ 79.191070][ T7508] pimreg: left allmulticast mode [ 79.305155][ T7526] hub 9-0:1.0: USB hub found [ 79.323743][ T7526] hub 9-0:1.0: 8 ports detected [ 79.385431][ T7545] vlan2: entered allmulticast mode [ 79.592208][ T7586] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1725'. [ 79.800519][ T7599] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.800519][ T7599] program syz.3.1726 not setting count and/or reply_len properly [ 79.851440][ T7601] loop1: detected capacity change from 0 to 512 [ 79.858139][ T7601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.908673][ T7605] loop2: detected capacity change from 0 to 1024 [ 79.916747][ T7601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.950417][ T7601] EXT4-fs (loop1): 1 truncate cleaned up [ 79.956527][ T7601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.969357][ T7605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.045288][ T7618] loop4: detected capacity change from 0 to 2048 [ 80.183763][ T7618] loop4: p1 < > p4 [ 80.198741][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.208846][ T7618] loop4: p4 size 8388608 extends beyond EOD, truncated [ 80.473392][ T7644] Falling back ldisc for ttyS3. [ 80.719135][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.828683][ T7697] capability: warning: `syz.3.1771' uses deprecated v2 capabilities in a way that may be insecure [ 81.630634][ T7733] IPVS: stopping master sync thread 7729 ... [ 81.721555][ T7743] 9pnet_fd: Insufficient options for proto=fd [ 81.761160][ T7748] loop3: detected capacity change from 0 to 164 [ 81.787592][ T7748] bio_check_eod: 40 callbacks suppressed [ 81.787653][ T7748] syz.3.1793: attempt to access beyond end of device [ 81.787653][ T7748] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.835199][ T7748] syz.3.1793: attempt to access beyond end of device [ 81.835199][ T7748] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.943070][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1788'. [ 82.001221][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 82.115810][ T7796] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 82.140716][ T7804] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 82.186711][ T7812] loop2: detected capacity change from 0 to 256 [ 82.203993][ T7812] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.241567][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 82.384204][ T7839] loop2: detected capacity change from 0 to 512 [ 82.401490][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.416336][ T7839] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.464535][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.084556][ T7866] serio: Serial port ptm0 [ 83.354656][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1864'. [ 83.377262][ T7897] veth0_macvtap: left promiscuous mode [ 83.521184][ T7908] hub 9-0:1.0: USB hub found [ 83.526066][ T7908] hub 9-0:1.0: 8 ports detected [ 83.541144][ T7910] macvtap1: entered allmulticast mode [ 83.546590][ T7910] bridge0: entered allmulticast mode [ 83.582840][ T7910] batman_adv: batadv0: Adding interface: macvtap1 [ 83.589417][ T7910] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.621302][ T7910] batman_adv: batadv0: Interface activated: macvtap1 [ 83.653388][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 83.653404][ T29] audit: type=1400 audit(1761020339.144:2292): avc: denied { read append } for pid=7915 comm="syz.3.1872" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.684002][ T29] audit: type=1400 audit(1761020339.144:2293): avc: denied { ioctl open } for pid=7915 comm="syz.3.1872" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.710034][ T7917] random: crng reseeded on system resumption [ 83.742983][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 83.777614][ T7929] 9pnet_fd: Insufficient options for proto=fd [ 83.900823][ T29] audit: type=1400 audit(1761020339.394:2294): avc: denied { getopt } for pid=7939 comm="syz.3.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.990301][ T29] audit: type=1326 audit(1761020339.484:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.020111][ T7963] loop4: detected capacity change from 0 to 512 [ 84.024684][ T29] audit: type=1326 audit(1761020339.504:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.049992][ T29] audit: type=1326 audit(1761020339.504:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.073625][ T29] audit: type=1326 audit(1761020339.504:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.098328][ T29] audit: type=1326 audit(1761020339.504:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.122012][ T29] audit: type=1326 audit(1761020339.504:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.145597][ T29] audit: type=1326 audit(1761020339.514:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 84.196500][ T7963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.210541][ T7963] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.258146][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 84.268408][ T7973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7973 comm=syz.2.1897 [ 84.281293][ T7973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7973 comm=syz.2.1897 [ 84.332386][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.361037][ T7984] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 84.439497][ T7999] loop4: detected capacity change from 0 to 256 [ 84.652652][ T8027] SELinux: Context is not valid (left unmapped). [ 84.675214][ T8030] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 84.755951][ T8039] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1926'. [ 85.444718][ T8070] loop3: detected capacity change from 0 to 128 [ 85.454761][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.454761][ T8070] loop3: rw=2049, sector=138, nr_sectors = 72 limit=128 [ 85.469193][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.469193][ T8070] loop3: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 85.485962][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.485962][ T8070] loop3: rw=2049, sector=216, nr_sectors = 2 limit=128 [ 85.499499][ T8070] buffer_io_error: 23 callbacks suppressed [ 85.499516][ T8070] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 85.514942][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.514942][ T8070] loop3: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 85.529057][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.529057][ T8070] loop3: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 85.542650][ T8070] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 85.559103][ T8072] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 85.564995][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.564995][ T8070] loop3: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 85.580397][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.580397][ T8070] loop3: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 85.593896][ T8070] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 85.635361][ T8070] syz.3.1941: attempt to access beyond end of device [ 85.635361][ T8070] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 85.707806][ T8070] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 85.717580][ T8070] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 86.389204][ T8137] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 87.087869][ T8159] netlink: 'syz.1.1977': attribute type 21 has an invalid length. [ 87.160012][ T8164] bridge0: entered promiscuous mode [ 87.165589][ T8164] macvtap1: entered allmulticast mode [ 87.171083][ T8164] bridge0: entered allmulticast mode [ 87.199974][ T8164] batman_adv: batadv0: Adding interface: macvtap1 [ 87.208560][ T8164] batman_adv: batadv0: Interface activated: macvtap1 [ 87.964776][ T8194] loop4: detected capacity change from 0 to 512 [ 87.988863][ T8194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.008442][ T8194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.071691][ T8194] EXT4-fs (loop4): 1 truncate cleaned up [ 88.077867][ T8194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.628671][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.899353][ T8226] loop3: detected capacity change from 0 to 128 [ 88.915477][ T8226] bio_check_eod: 3 callbacks suppressed [ 88.915537][ T8226] syz.3.2006: attempt to access beyond end of device [ 88.915537][ T8226] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 88.972951][ T8226] syz.3.2006: attempt to access beyond end of device [ 88.972951][ T8226] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 88.986621][ T8226] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 88.998095][ T8226] syz.3.2006: attempt to access beyond end of device [ 88.998095][ T8226] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 89.011872][ T8226] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 89.025888][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.025888][ T8226] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 89.040106][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.040106][ T8226] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 89.054032][ T8226] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 89.070462][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.070462][ T8226] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 89.084082][ T8226] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 89.093670][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 89.093686][ T29] audit: type=1400 audit(1761020344.584:2860): avc: denied { lock } for pid=8233 comm="syz.1.2010" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.125861][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.125861][ T8226] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 89.139964][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.139964][ T8226] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 89.153509][ T8226] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 89.210807][ T29] audit: type=1326 audit(1761020344.704:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.218505][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.218505][ T8226] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 89.234494][ T29] audit: type=1326 audit(1761020344.704:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.286232][ T8226] syz.3.2006: attempt to access beyond end of device [ 89.286232][ T8226] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 89.304385][ T8242] program syz.0.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.314063][ T29] audit: type=1326 audit(1761020344.704:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.337566][ T29] audit: type=1326 audit(1761020344.704:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.361102][ T29] audit: type=1326 audit(1761020344.704:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.384613][ T29] audit: type=1326 audit(1761020344.704:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.408191][ T29] audit: type=1326 audit(1761020344.704:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.431625][ T29] audit: type=1326 audit(1761020344.704:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.455187][ T29] audit: type=1326 audit(1761020344.704:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 89.643584][ T8259] loop3: detected capacity change from 0 to 512 [ 89.819118][ T8259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.840191][ T8259] EXT4-fs (loop3): 1 truncate cleaned up [ 89.846343][ T8259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.992690][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2027'. [ 90.004951][ T8273] bond_slave_0: entered promiscuous mode [ 90.010736][ T8273] bond_slave_1: entered promiscuous mode [ 90.039923][ T8273] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 90.059049][ T8273] bond_slave_0: left promiscuous mode [ 90.064492][ T8273] bond_slave_1: left promiscuous mode [ 90.118841][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.155860][ T8275] rdma_op ffff88811bae2580 conn xmit_rdma 0000000000000000 [ 90.228751][ T8283] batadv_slave_1: entered promiscuous mode [ 90.248861][ T8282] batadv_slave_1: left promiscuous mode [ 90.263523][ T8287] loop3: detected capacity change from 0 to 512 [ 90.277563][ T8287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.284810][ T8287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.304984][ T8287] EXT4-fs (loop3): 1 truncate cleaned up [ 90.476747][ T8287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.081930][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.161545][ T8305] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.563678][ T8342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8342 comm=syz.3.2059 [ 91.576551][ T8342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8342 comm=syz.3.2059 [ 91.609963][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 91.642511][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 91.660661][ T8348] syzkaller1: entered promiscuous mode [ 91.666246][ T8348] syzkaller1: entered allmulticast mode [ 91.910950][ T8376] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 92.975869][ T8414] loop3: detected capacity change from 0 to 2048 [ 93.459341][ T8459] SELinux: failed to load policy [ 93.611933][ T8475] binfmt_misc: register: failed to install interpreter file ./file2 [ 93.674859][ T8481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2121'. [ 93.801265][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 93.810364][ T8487] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2124'. [ 93.819465][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 93.828340][ T8487] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2124'. [ 93.839375][ T8488] SELinux: policydb version 0 does not match my version range 15-35 [ 93.842803][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 93.858477][ T8488] SELinux: failed to load policy [ 94.141872][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 94.141885][ T29] audit: type=1400 audit(1761020349.634:2977): avc: denied { append } for pid=8512 comm="syz.4.2136" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.229561][ T29] audit: type=1400 audit(1761020349.714:2978): avc: denied { write } for pid=8519 comm="syz.0.2140" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.252442][ T29] audit: type=1400 audit(1761020349.714:2979): avc: denied { open } for pid=8519 comm="syz.0.2140" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.275771][ T29] audit: type=1400 audit(1761020349.714:2980): avc: denied { ioctl } for pid=8519 comm="syz.0.2140" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.398399][ T29] audit: type=1400 audit(1761020349.794:2981): avc: denied { create } for pid=8521 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.405938][ T8534] loop4: detected capacity change from 0 to 1024 [ 94.418137][ T29] audit: type=1400 audit(1761020349.804:2982): avc: denied { create } for pid=8523 comm="syz.4.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.427965][ T8534] EXT4-fs: Ignoring removed bh option [ 94.444066][ T29] audit: type=1400 audit(1761020349.814:2983): avc: denied { connect } for pid=8521 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.469383][ T29] audit: type=1400 audit(1761020349.814:2984): avc: denied { ioctl } for pid=8521 comm="syz.3.2141" path="socket:[19952]" dev="sockfs" ino=19952 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.488924][ T8534] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.494380][ T29] audit: type=1326 audit(1761020349.854:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.0.2145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab1251efc9 code=0x0 [ 94.537563][ T8534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.552227][ T8537] ------------[ cut here ]------------ [ 94.557752][ T8537] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 94.578205][ T8537] WARNING: CPU: 0 PID: 8537 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 94.588862][ T8537] Modules linked in: [ 94.593437][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.3.2147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.603201][ T29] audit: type=1400 audit(1761020350.074:2986): avc: denied { mount } for pid=8533 comm="syz.4.2146" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.603218][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.603236][ T8537] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 94.641285][ T8537] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 d9 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 94.660953][ T8537] RSP: 0018:ffffc9000ee27408 EFLAGS: 00010282 [ 94.667128][ T8537] RAX: 56c21f92ce65b100 RBX: ffff88811a09b840 RCX: 0000000000080000 [ 94.675175][ T8537] RDX: ffffc90004b94000 RSI: 0000000000012b5d RDI: 0000000000012b5e [ 94.679384][ T8534] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.2146: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 94.683237][ T8537] RBP: 0000000000000000 R08: 0001c9000ee27257 R09: 0000000000000000 [ 94.710939][ T8537] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a09b800 [ 94.718973][ T8537] R13: ffff888124458000 R14: ffff888124458000 R15: ffff88811a09b838 [ 94.727160][ T8537] FS: 00007fe8b7bc76c0(0000) GS:ffff8882aebfa000(0000) knlGS:0000000000000000 [ 94.736195][ T8537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.743006][ T8537] CR2: 00007fe8b7bc6f98 CR3: 0000000124f0e000 CR4: 00000000003506f0 [ 94.751025][ T8537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.759077][ T8537] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 94.760302][ T8534] EXT4-fs (loop4): Remounting filesystem read-only [ 94.767104][ T8537] Call Trace: [ 94.767115][ T8537] [ 94.767133][ T8537] reg_set_min_max+0x1eb/0x260 [ 94.784815][ T8537] check_cond_jmp_op+0x1370/0x19e0 [ 94.790093][ T8537] do_check+0x3363/0x8460 [ 94.794579][ T8537] do_check_common+0xc5e/0x12b0 [ 94.799549][ T8537] bpf_check+0xaaae/0xd9d0 [ 94.800136][ T8541] io-wq is not configured for unbound workers [ 94.804001][ T8537] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 94.816256][ T8537] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 94.822311][ T8537] ? css_rstat_updated+0xb7/0x240 [ 94.827476][ T8537] ? try_charge_memcg+0x215/0xa10 [ 94.832570][ T8537] ? pcpu_block_update+0x24e/0x3b0 [ 94.837922][ T8537] ? pcpu_block_refresh_hint+0x157/0x170 [ 94.843790][ T8537] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 94.849929][ T8537] ? css_rstat_updated+0xb7/0x240 [ 94.855098][ T8537] ? __rcu_read_unlock+0x4f/0x70 [ 94.860194][ T8537] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 94.866033][ T8537] ? bpf_prog_alloc+0x5b/0x150 [ 94.870868][ T8537] ? pcpu_alloc_noprof+0xd29/0x1250 [ 94.876183][ T8537] ? should_fail_ex+0x30/0x280 [ 94.881022][ T8537] ? should_failslab+0x8c/0xb0 [ 94.885847][ T8537] ? __kmalloc_noprof+0x2a2/0x570 [ 94.890932][ T8537] ? security_bpf_prog_load+0x60/0x140 [ 94.896432][ T8537] ? selinux_bpf_prog_load+0xad/0xd0 [ 94.901779][ T8537] ? security_bpf_prog_load+0x9e/0x140 [ 94.907409][ T8537] bpf_prog_load+0xf6e/0x1100 [ 94.912156][ T8537] ? security_bpf+0x2b/0x90 [ 94.916682][ T8537] __sys_bpf+0x469/0x7c0 [ 94.921009][ T8537] __x64_sys_bpf+0x41/0x50 [ 94.925495][ T8537] x64_sys_call+0x2aee/0x3000 [ 94.930244][ T8537] do_syscall_64+0xd2/0x200 [ 94.934854][ T8537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.940990][ T8537] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.946784][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.952759][ T8537] RIP: 0033:0x7fe8b915efc9 [ 94.957270][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.977036][ T8537] RSP: 002b:00007fe8b7bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.985698][ T8537] RAX: ffffffffffffffda RBX: 00007fe8b93b5fa0 RCX: 00007fe8b915efc9 [ 94.993736][ T8537] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 95.001880][ T8537] RBP: 00007fe8b91e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 95.010032][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.018034][ T8537] R13: 00007fe8b93b6038 R14: 00007fe8b93b5fa0 R15: 00007ffce68f5758 [ 95.026063][ T8537] [ 95.029135][ T8537] ---[ end trace 0000000000000000 ]--- [ 95.046656][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.111742][ T8549] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.121044][ T8549] vhci_hcd: invalid port number 96 [ 95.126240][ T8549] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 95.319196][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.336021][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.359276][ T8572] macvtap0: refused to change device tx_queue_len [ 95.419707][ T8576] serio: Serial port ptm0 [ 95.542236][ T8584] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 95.624001][ T4041] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 95.694733][ T8593] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2170'. [ 95.704680][ T8592] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2170'. [ 95.879242][ T8607] syzkaller1: entered promiscuous mode [ 95.884845][ T8607] syzkaller1: entered allmulticast mode [ 96.295131][ T8627] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 96.295131][ T8627] program syz.4.2186 not setting count and/or reply_len properly [ 96.447078][ T8641] loop3: detected capacity change from 0 to 512 [ 96.465922][ T8641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.488430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.499959][ T8641] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2192: inode has both inline data and extents flags [ 96.541481][ T8641] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2192: couldn't read orphan inode 15 (err -117) [ 96.562103][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.602904][ T8641] EXT4-fs (loop3): shut down requested (2) [ 96.620418][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.796719][ T8678] hub 1-0:1.0: USB hub found [ 96.801631][ T8678] hub 1-0:1.0: 8 ports detected [ 96.853408][ T8682] rdma_op ffff888103096180 conn xmit_rdma 0000000000000000 [ 96.930234][ T8688] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2214'. [ 97.267368][ T8709] netlink: 80 bytes leftover after parsing attributes in process `+}[@'. [ 97.374563][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 97.385635][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 97.516714][ T8732] macvtap0: entered promiscuous mode [ 97.543586][ T8732] macvtap0: left promiscuous mode [ 97.826980][ T8761] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 97.951685][ T8761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.013102][ T8761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.035225][ T8761] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.060016][ T8761] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 98.152035][ T8777] loop4: detected capacity change from 0 to 2048 [ 98.195056][ T8777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.628642][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 98.739089][ T8809] IPv6: addrconf: prefix option has invalid lifetime [ 98.756005][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.148759][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 99.148776][ T29] audit: type=1400 audit(1761020354.644:3247): avc: denied { accept } for pid=8844 comm="syz.3.2286" laddr=fe80::13 lport=48413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.201098][ T8848] loop3: detected capacity change from 0 to 512 [ 99.214724][ T29] audit: type=1400 audit(1761020354.704:3248): avc: denied { mounton } for pid=8850 comm="syz.1.2290" path="/457/file0" dev="tmpfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.219798][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2289'. [ 99.246502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8cf800: rx timeout, send abort [ 99.246541][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8cf200: rx timeout, send abort [ 99.255735][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b8cf800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.255821][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b8cf200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.309035][ T8848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.323906][ T8848] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.344704][ T29] audit: type=1400 audit(1761020354.834:3249): avc: denied { mount } for pid=8854 comm="syz.0.2291" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.381652][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.392831][ T29] audit: type=1400 audit(1761020354.884:3250): avc: denied { ioctl } for pid=8856 comm="syz.0.2292" path="socket:[20472]" dev="sockfs" ino=20472 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.467669][ T29] audit: type=1400 audit(1761020354.954:3251): avc: denied { tracepoint } for pid=8863 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 99.505170][ T29] audit: type=1400 audit(1761020354.994:3252): avc: denied { read write } for pid=8862 comm="syz.3.2293" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.535118][ T29] audit: type=1400 audit(1761020354.994:3253): avc: denied { open } for pid=8862 comm="syz.3.2293" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.558596][ T29] audit: type=1400 audit(1761020354.994:3254): avc: denied { ioctl } for pid=8862 comm="syz.3.2293" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.690908][ T29] audit: type=1400 audit(1761020355.184:3255): avc: denied { create } for pid=8880 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.739672][ T29] audit: type=1400 audit(1761020355.234:3256): avc: denied { write } for pid=8880 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.988682][ T8918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8918 comm=syz.1.2321 [ 100.017704][ T8920] netlink: 'syz.3.2322': attribute type 1 has an invalid length. [ 100.273451][ T8926] bond2: (slave bridge2): making interface the new active one [ 100.286351][ T8926] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 100.378881][ T8938] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 100.394968][ T8942] random: crng reseeded on system resumption [ 100.438468][ T8941] ALSA: seq fatal error: cannot create timer (-19) [ 100.529496][ T8959] ref_ctr_offset mismatch. inode: 0x92e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 100.631136][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2346'. [ 100.647475][ T8973] IPVS: Unknown mcast interface: ipvlan1 [ 100.656044][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 100.689425][ T8982] pimreg: entered allmulticast mode [ 100.696576][ T8982] pimreg: left allmulticast mode [ 100.702201][ T8976] __nla_validate_parse: 1 callbacks suppressed [ 100.702318][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 100.717744][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 100.758136][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 100.767303][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 101.075304][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 101.092996][ T9028] rdma_op ffff888124fba180 conn xmit_rdma 0000000000000000 [ 101.229568][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.236771][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.245983][ T8996] bridge_slave_0: entered allmulticast mode [ 101.266712][ T8996] bridge_slave_0: entered promiscuous mode [ 101.274794][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.281993][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.290109][ T8996] bridge_slave_1: entered allmulticast mode [ 101.296824][ T8996] bridge_slave_1: entered promiscuous mode [ 101.331836][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.342615][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.377604][ T8996] team0: Port device team_slave_0 added [ 101.384843][ T8996] team0: Port device team_slave_1 added [ 101.410152][ T3974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.422172][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.429282][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.455351][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.468141][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.475230][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.501176][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.535199][ T8996] hsr_slave_0: entered promiscuous mode [ 101.541547][ T8996] hsr_slave_1: entered promiscuous mode [ 101.547380][ T8996] debugfs: 'hsr0' already exists in 'hsr' [ 101.553226][ T8996] Cannot create hsr debugfs directory [ 101.578772][ T9066] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 101.592017][ T3974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.654695][ T3974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.679515][ T9075] loop3: detected capacity change from 0 to 512 [ 101.699949][ T3974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.719052][ T9075] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2384: error while reading EA inode 32 err=-116 [ 101.738540][ T9075] EXT4-fs (loop3): Remounting filesystem read-only [ 101.745282][ T9075] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 101.756679][ T9075] EXT4-fs (loop3): 1 orphan inode deleted [ 101.762990][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.792806][ T8996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.813094][ T8996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.827076][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.839429][ T8996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.858055][ T8996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.931216][ T3974] bridge_slave_1: left allmulticast mode [ 101.936983][ T3974] bridge_slave_1: left promiscuous mode [ 101.942816][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.970379][ T3974] bridge_slave_0: left allmulticast mode [ 101.976181][ T3974] bridge_slave_0: left promiscuous mode [ 101.982046][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.080147][ T9115] hub 9-0:1.0: USB hub found [ 102.085173][ T9115] hub 9-0:1.0: 8 ports detected [ 102.114981][ T3974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.129779][ T3974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.140233][ T3974] bond0 (unregistering): Released all slaves [ 102.151750][ T3974] bond1 (unregistering): Released all slaves [ 102.161530][ T3974] bond2 (unregistering): Released all slaves [ 102.172540][ T3974] bond3 (unregistering): (slave macvlan1): Releasing active interface [ 102.181415][ T3974] veth1_vlan: left allmulticast mode [ 102.188102][ T3974] bond3 (unregistering): Released all slaves [ 102.240410][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.265681][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.286206][ T3974] hsr_slave_0: left promiscuous mode [ 102.293391][ T3974] hsr_slave_1: left promiscuous mode [ 102.303165][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.310632][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.320754][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.328426][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.343645][ T3974] veth1_macvtap: left promiscuous mode [ 102.357888][ T3974] veth0_macvtap: left promiscuous mode [ 102.367627][ T3974] veth1_vlan: left promiscuous mode [ 102.380553][ T3974] veth0_vlan: left promiscuous mode [ 102.486062][ T9152] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 102.486062][ T9152] program syz.3.2417 not setting count and/or reply_len properly [ 102.524104][ T9154] loop3: detected capacity change from 0 to 1024 [ 102.531015][ T9154] EXT4-fs: Ignoring removed orlov option [ 102.548787][ T9154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.576530][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.583662][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.640132][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.647276][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.660712][ T9164] IPVS: stopping master sync thread 9169 ... [ 102.666761][ T9169] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 102.703021][ T8996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.714101][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.728045][ T9166] SELinux: failed to load policy [ 102.803173][ T9184] SELinux: policydb version 0 does not match my version range 15-35 [ 102.835405][ T9184] SELinux: failed to load policy [ 102.857309][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.050406][ T8996] veth0_vlan: entered promiscuous mode [ 103.070409][ T8996] veth1_vlan: entered promiscuous mode [ 103.102770][ T8996] veth0_macvtap: entered promiscuous mode [ 103.122215][ T8996] veth1_macvtap: entered promiscuous mode [ 103.138200][ T9224] SELinux: failed to load policy [ 103.140392][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.157767][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.181367][ T3949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.195456][ T3949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.228340][ T3949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.251790][ T3949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.638707][ T9311] macvtap0: refused to change device tx_queue_len [ 104.045799][ T9337] loop5: detected capacity change from 0 to 1024 [ 104.052552][ T9337] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 104.088275][ T9342] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.114977][ T9342] vhci_hcd: invalid port number 96 [ 104.120356][ T9342] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 104.140001][ T9346] serio: Serial port ptm0 [ 104.148158][ T9348] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 104.182303][ T9352] hub 9-0:1.0: USB hub found [ 104.187126][ T9352] hub 9-0:1.0: 8 ports detected [ 104.246036][ T9348] bond2: (slave bridge1): making interface the new active one [ 104.254291][ T9348] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 104.367311][ T9361] loop4: detected capacity change from 0 to 1024 [ 104.382318][ T9361] EXT4-fs: Ignoring removed orlov option [ 104.400707][ T9361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.473064][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 104.473081][ T29] audit: type=1400 audit(1761020359.964:3424): avc: denied { mount } for pid=9367 comm="syz.3.2501" name="/" dev="autofs" ino=23558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.515343][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.589419][ T29] audit: type=1400 audit(1761020360.074:3425): avc: denied { cpu } for pid=9373 comm="syz.5.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.684256][ T9383] netlink: 80 bytes leftover after parsing attributes in process `+}[@'. [ 104.716941][ T9386] unsupported nla_type 52263 [ 104.741187][ T9389] loop3: detected capacity change from 0 to 256 [ 104.751074][ T9392] netlink: 'syz.5.2510': attribute type 1 has an invalid length. [ 104.771052][ T9389] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.802870][ T29] audit: type=1400 audit(1761020360.294:3426): avc: denied { mount } for pid=9387 comm="syz.3.2511" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 104.834686][ T29] audit: type=1400 audit(1761020360.324:3427): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 105.012959][ T9401] loop5: detected capacity change from 0 to 1024 [ 105.020361][ T9401] EXT4-fs: Ignoring removed orlov option [ 105.044181][ T9401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.109616][ T9420] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.121971][ T9418] hub 1-0:1.0: USB hub found [ 105.127032][ T9418] hub 1-0:1.0: 8 ports detected [ 105.132057][ T9420] vhci_hcd: invalid port number 96 [ 105.132071][ T9420] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 105.149587][ T8996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.169493][ T9425] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 105.210614][ T29] audit: type=1326 audit(1761020360.694:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.234090][ T29] audit: type=1326 audit(1761020360.694:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.257641][ T29] audit: type=1326 audit(1761020360.694:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.281144][ T29] audit: type=1326 audit(1761020360.694:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.304690][ T29] audit: type=1326 audit(1761020360.694:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.328421][ T29] audit: type=1326 audit(1761020360.694:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.4.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 105.426279][ T9425] bond2: (slave bridge2): making interface the new active one [ 105.434229][ T9425] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 105.466685][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 105.475799][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'. [ 105.484933][ T9449] netlink: 'syz.5.2547': attribute type 20 has an invalid length. [ 105.496871][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 105.497695][ T4041] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.505869][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'. [ 105.522732][ T4041] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.523713][ T9449] netlink: 'syz.5.2547': attribute type 20 has an invalid length. [ 105.532661][ T4041] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.549759][ T4041] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.090461][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 106.137191][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2559'. [ 106.245041][ T9490] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 106.345378][ T9490] bond3: (slave bridge3): making interface the new active one [ 106.353300][ T9490] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 106.437579][ T9504] loop4: detected capacity change from 0 to 1024 [ 106.449553][ T9504] EXT4-fs: Ignoring removed orlov option [ 106.458085][ T9510] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 106.470654][ T9504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.473060][ T9510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.521530][ T9510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.529409][ T9510] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.530841][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.545736][ T9510] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 106.691309][ T9544] pimreg: entered allmulticast mode [ 106.700211][ T9544] pimreg: left allmulticast mode [ 106.809535][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 106.823326][ T9559] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 106.823516][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 106.839862][ T9559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.849237][ T4045] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.873403][ T9559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.881165][ T9559] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.893543][ T9559] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 106.909700][ T4045] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.918928][ T4045] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.928164][ T4045] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.983444][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2588'. [ 106.994074][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 107.003071][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 107.012159][ T9570] netlink: 'syz.4.2589': attribute type 20 has an invalid length. [ 107.042119][ T175] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.042145][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 107.059979][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 107.061203][ T175] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.069128][ T9570] netlink: 'syz.4.2589': attribute type 20 has an invalid length. [ 107.086475][ T175] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.101179][ T175] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.270139][ T9586] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 107.449848][ T4045] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xec [ 107.583645][ T9644] tls_set_device_offload: netdev not found [ 107.767273][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2624'. [ 107.828821][ T9655] syzkaller1: entered promiscuous mode [ 107.834389][ T9655] syzkaller1: entered allmulticast mode [ 108.071651][ T9665] SELinux: failed to load policy [ 108.269478][ T9679] loop4: detected capacity change from 0 to 512 [ 108.301587][ T9679] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2636: bg 0: block 393: padding at end of block bitmap is not set [ 108.318330][ T9679] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 108.327635][ T9679] EXT4-fs (loop4): 2 truncates cleaned up [ 108.334589][ T9679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.436457][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.555741][ T9708] SELinux: failed to load policy [ 108.581767][ T3418] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 108.589339][ T3418] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 108.614215][ T3418] hid-generic 0000:0003:0001.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 108.731569][ T9735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.761558][ T9738] wireguard0: entered promiscuous mode [ 108.767152][ T9738] wireguard0: entered allmulticast mode [ 108.781984][ T9743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.796625][ T9735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.820384][ T9735] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.833660][ T9735] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.850401][ T9747] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.864195][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 108.873637][ T9743] bond4: (slave batadv1): making interface the new active one [ 108.882919][ T9743] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 109.180117][ T9766] SELinux: failed to load policy [ 109.330312][ T9774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.338738][ T9774] bridge0: port 3(bond4) entered blocking state [ 109.345083][ T9774] bridge0: port 3(bond4) entered disabled state [ 109.351949][ T9774] bond4: entered allmulticast mode [ 109.359743][ T9774] bond4: entered promiscuous mode [ 109.365101][ T9774] bridge0: port 3(bond4) entered blocking state [ 109.371425][ T9774] bridge0: port 3(bond4) entered forwarding state [ 109.438654][ T9786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.450258][ T9789] loop3: detected capacity change from 0 to 128 [ 109.467243][ T9789] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.508200][ T9789] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.517836][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 109.517914][ T29] audit: type=1400 audit(1761020365.004:3849): avc: denied { ioctl } for pid=9798 comm="syz.5.2687" path="socket:[25194]" dev="sockfs" ino=25194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.560597][ T3968] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.566315][ T29] audit: type=1400 audit(1761020365.014:3850): avc: denied { mount } for pid=9787 comm="syz.3.2683" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 109.592130][ T29] audit: type=1400 audit(1761020365.044:3851): avc: denied { bind } for pid=9798 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.611528][ T29] audit: type=1400 audit(1761020365.054:3852): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 109.633023][ T29] audit: type=1326 audit(1761020365.084:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.656740][ T29] audit: type=1326 audit(1761020365.084:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.680526][ T29] audit: type=1326 audit(1761020365.124:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.704023][ T29] audit: type=1326 audit(1761020365.124:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.727584][ T29] audit: type=1326 audit(1761020365.124:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.751029][ T29] audit: type=1326 audit(1761020365.124:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 109.777423][ T3984] bridge0: port 3(bond4) entered disabled state [ 110.066420][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.096969][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.208987][ T9834] batman_adv: batadv0: Interface deactivated: macvtap1 [ 110.215942][ T9834] batman_adv: batadv0: Removing interface: macvtap1 [ 110.540053][ T9845] xt_hashlimit: max too large, truncated to 1048576 [ 110.547790][ T9845] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 111.160657][ T9864] loop4: detected capacity change from 0 to 32768 [ 111.228892][ T9864] loop4: p1 p2 p3 < p5 p6 > [ 111.234616][ T9864] loop4: p2 size 16775168 extends beyond EOD, truncated [ 111.242625][ T9864] loop4: p5 start 4294970168 is beyond EOD, truncated [ 111.325582][ T9891] validate_nla: 2 callbacks suppressed [ 111.325601][ T9891] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 111.340137][ T9889] xt_hashlimit: max too large, truncated to 1048576 [ 111.355733][ T9891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.395311][ T9891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.415764][ T9891] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 111.427878][ T9891] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 111.486001][ T9910] __nla_validate_parse: 5 callbacks suppressed [ 111.486020][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.501267][ T9910] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.510823][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.519737][ T9910] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.529977][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.570678][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.579688][ T9910] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.588974][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.597943][ T9910] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.612213][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 111.625949][ T9920] $H: renamed from bond0 (while UP) [ 111.638702][ T9920] $H: entered promiscuous mode [ 111.643878][ T9920] bond_slave_0: entered promiscuous mode [ 111.649768][ T9920] bond_slave_1: entered promiscuous mode [ 112.226149][ T9989] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.478676][T10004] tipc: Started in network mode [ 112.478711][T10004] tipc: Node identity ea7218516acf, cluster identity 4711 [ 112.478806][T10004] tipc: Enabled bearer , priority 0 [ 112.485328][T10004] tipc: Disabling bearer [ 112.643854][T10013] netlink: 'syz.0.2780': attribute type 1 has an invalid length. [ 112.658091][T10013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.698839][T10013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.714484][T10013] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.727917][T10013] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 113.015616][T10053] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 113.050638][T10053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.099824][T10053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.107361][T10053] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.146181][T10053] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 113.279515][T10088] netlink: 'syz.1.2814': attribute type 4 has an invalid length. [ 113.296066][T10088] netlink: 'syz.1.2814': attribute type 4 has an invalid length. [ 114.087816][T10120] loop5: detected capacity change from 0 to 512 [ 114.100932][T10120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.113940][T10120] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.159177][ T8996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.417409][T10155] netlink: 'syz.1.2840': attribute type 3 has an invalid length. [ 114.510373][T10164] loop3: detected capacity change from 0 to 512 [ 114.517486][T10164] EXT4-fs: Ignoring removed orlov option [ 114.524141][T10164] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 114.574714][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 114.574732][ T29] audit: type=1400 audit(1761020370.064:4158): avc: denied { execute } for pid=10165 comm="syz.3.2845" name="file0" dev="tmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.603494][ T29] audit: type=1400 audit(1761020370.064:4159): avc: denied { execute_no_trans } for pid=10165 comm="syz.3.2845" path="/633/file0" dev="tmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.637061][T10170] loop3: detected capacity change from 0 to 128 [ 114.647976][T10170] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 114.689794][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.894546][T10186] loop3: detected capacity change from 0 to 512 [ 114.916794][ T29] audit: type=1326 audit(1761020370.404:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93ae555e67 code=0x7ffc0000 [ 114.950039][T10186] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.961863][T10186] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 114.972062][T10186] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2853: Corrupt directory, running e2fsck is recommended [ 114.988760][ T29] audit: type=1326 audit(1761020370.404:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93ae4fb099 code=0x7ffc0000 [ 115.012437][ T29] audit: type=1326 audit(1761020370.404:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93ae555e67 code=0x7ffc0000 [ 115.013373][T10186] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 115.036340][ T29] audit: type=1326 audit(1761020370.404:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93ae4fb099 code=0x7ffc0000 [ 115.036387][ T29] audit: type=1326 audit(1761020370.404:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 115.044838][T10186] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.2853: corrupted in-inode xattr: invalid ea_ino [ 115.068164][ T29] audit: type=1326 audit(1761020370.404:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 115.128847][ T29] audit: type=1326 audit(1761020370.404:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 115.152360][ T29] audit: type=1326 audit(1761020370.414:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae55efc9 code=0x7ffc0000 [ 115.202623][T10205] netlink: 'syz.0.2860': attribute type 11 has an invalid length. [ 115.208022][T10204] netlink: 'syz.4.2862': attribute type 3 has an invalid length. [ 115.241018][T10186] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2853: couldn't read orphan inode 15 (err -117) [ 115.264067][T10186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.299057][T10209] atomic_op ffff88811b6f3d28 conn xmit_atomic 0000000000000000 [ 115.303267][T10186] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.318532][T10186] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 115.329061][T10186] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2853: Corrupt directory, running e2fsck is recommended [ 115.351034][T10186] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.362639][T10186] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 115.372771][T10186] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2853: Corrupt directory, running e2fsck is recommended [ 115.394157][T10214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=10214 comm=syz.4.2866 [ 115.409086][T10212] netem: incorrect ge model size [ 115.414102][T10212] netem: change failed [ 115.441542][T10221] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.453270][T10221] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 115.463594][T10221] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2853: Corrupt directory, running e2fsck is recommended [ 115.478597][T10186] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.496226][T10225] netlink: 'syz.0.2870': attribute type 3 has an invalid length. [ 115.497180][T10224] loop4: detected capacity change from 0 to 512 [ 115.529523][T10224] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2871: corrupted inode contents [ 115.545103][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.554575][T10224] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #16: comm syz.4.2871: mark_inode_dirty error [ 115.566249][T10224] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2871: corrupted inode contents [ 115.579692][T10224] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2871: mark_inode_dirty error [ 115.591723][T10224] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2871: corrupted inode contents [ 115.606024][T10224] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 115.615362][T10224] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2871: corrupted inode contents [ 115.628278][T10224] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.2871: mark_inode_dirty error [ 115.640264][T10224] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 115.664296][T10224] EXT4-fs (loop4): 1 truncate cleaned up [ 115.670522][T10224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.683401][ T4048] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:59: Failed to release dquot type 1 [ 115.697836][T10224] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.724018][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.844922][T10256] sd 0:0:1:0: device reset [ 116.133879][T10296] random: crng reseeded on system resumption [ 116.205266][ T9462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.218400][ T9462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.228758][T10303] sd 0:0:1:0: device reset [ 116.237461][ T9462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.250749][ T9462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.363829][T10327] loop3: detected capacity change from 0 to 512 [ 116.370880][T10327] EXT4-fs: Ignoring removed bh option [ 116.376768][T10327] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 116.387739][T10327] EXT4-fs (loop3): 1 truncate cleaned up [ 116.394029][T10327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.418725][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.453123][T10336] loop4: detected capacity change from 0 to 512 [ 116.462153][T10336] EXT4-fs: Ignoring removed orlov option [ 116.469009][T10336] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 116.487099][T10341] netlink: 'syz.3.2922': attribute type 39 has an invalid length. [ 116.595164][T10355] sd 0:0:1:0: device reset [ 116.601451][T10358] loop9: detected capacity change from 0 to 7 [ 116.607877][T10358] buffer_io_error: 23 callbacks suppressed [ 116.607894][T10358] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.621934][T10358] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.630078][T10358] loop9: unable to read partition table [ 116.635911][T10358] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 116.635911][T10358] ) failed (rc=-5) [ 116.758237][T10373] loop3: detected capacity change from 0 to 128 [ 116.764964][T10373] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.777205][T10373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.798195][ T4048] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.161741][T10388] sd 0:0:1:0: device reset [ 117.475903][T10415] __nla_validate_parse: 20 callbacks suppressed [ 117.475933][T10415] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2953'. [ 117.563347][T10423] loop9: detected capacity change from 0 to 7 [ 117.569848][T10423] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.578147][T10423] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.586090][T10423] loop9: unable to read partition table [ 117.595625][T10423] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 117.595625][T10423] ) failed (rc=-5) [ 117.670733][T10427] netlink: 'syz.5.2960': attribute type 6 has an invalid length. [ 117.771437][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 118.087771][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.101985][T10504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 118.143978][T10510] loop5: detected capacity change from 0 to 1024 [ 118.150920][T10510] EXT4-fs: Ignoring removed orlov option [ 118.159502][T10510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.447297][T10529] SELinux: failed to load policy [ 118.489665][ T8996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.663789][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 118.989390][T10560] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.023692][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 119.087141][T10565] SELinux: failed to load policy [ 119.109201][T10571] loop3: detected capacity change from 0 to 1024 [ 119.136033][T10571] EXT4-fs: Ignoring removed orlov option [ 119.151851][T10571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.167339][T10578] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3023'. [ 119.400918][T10595] wireguard0: entered promiscuous mode [ 119.405458][ T3418] hid-generic 0000:0003:0001.0008: unknown main item tag 0x0 [ 119.406562][T10595] wireguard0: entered allmulticast mode [ 119.420254][ T3418] hid-generic 0000:0003:0001.0008: unknown main item tag 0x0 [ 119.463209][ T3418] hid-generic 0000:0003:0001.0008: hidraw0: HID v0.03 Device [syz0] on syz1 [ 119.520665][T10604] loop4: detected capacity change from 0 to 1024 [ 119.559251][T10604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.590820][T10604] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.675816][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.694156][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.745922][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 119.755157][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 119.821544][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 119.830622][T10623] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3040'. [ 119.841051][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 119.930940][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.948779][ T3399] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.092458][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 120.092475][ T29] audit: type=1326 audit(1761020375.584:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.140957][T10649] wireguard0: entered promiscuous mode [ 120.146476][T10649] wireguard0: entered allmulticast mode [ 120.176024][ T29] audit: type=1326 audit(1761020375.614:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.199978][ T29] audit: type=1326 audit(1761020375.614:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.223781][ T29] audit: type=1326 audit(1761020375.614:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.247405][ T29] audit: type=1326 audit(1761020375.614:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.271136][ T29] audit: type=1326 audit(1761020375.614:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.294804][ T29] audit: type=1326 audit(1761020375.614:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.3.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe8b915efc9 code=0x7ffc0000 [ 120.425254][ T29] audit: type=1326 audit(1761020375.914:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.5.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 120.458665][ T29] audit: type=1326 audit(1761020375.944:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.5.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 120.482275][ T29] audit: type=1326 audit(1761020375.944:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.5.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f60d3efc9 code=0x7ffc0000 [ 120.728006][T10682] $H: renamed from bond0 (while UP) [ 120.760408][T10682] $H: entered promiscuous mode [ 120.765552][T10682] bond_slave_0: entered promiscuous mode [ 120.771713][T10682] bond_slave_1: entered promiscuous mode [ 120.873553][T10701] wireguard0: entered promiscuous mode [ 120.879138][T10701] wireguard0: entered allmulticast mode [ 121.077716][T10728] wireguard0: entered promiscuous mode [ 121.083391][T10728] wireguard0: entered allmulticast mode [ 121.902361][T10780] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.271288][ T3950] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 122.280315][ T3950] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 122.289238][ T3950] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 122.298119][ T3950] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 122.327187][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.334674][T10790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.343690][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.351472][T10790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.475721][T10806] pim6reg: entered allmulticast mode [ 122.622576][T10824] sch_fq: defrate 4294967295 ignored. [ 122.652462][T10830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10830 comm=syz.1.3122 [ 123.100755][T10836] __nla_validate_parse: 19 callbacks suppressed [ 123.100775][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.116389][T10836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.125685][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.134930][T10836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.146902][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.172910][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.181917][T10836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.191066][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.200108][T10836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.212944][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 123.303808][T10857] tipc: Started in network mode [ 123.308816][T10857] tipc: Node identity a6d9550d4116, cluster identity 4711 [ 123.316041][T10857] tipc: Enabled bearer , priority 0 [ 123.338938][T10857] tipc: Disabling bearer [ 123.371069][T10862] vxlan0: entered promiscuous mode [ 123.455644][T10874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10874 comm=syz.0.3140 [ 123.468384][T10874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10874 comm=syz.0.3140 [ 123.714452][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.722165][T10896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.730838][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.738267][T10896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.802374][T10901] loop5: detected capacity change from 0 to 7 [ 123.930983][T10905] tipc: Started in network mode [ 123.936095][T10905] tipc: Node identity ae86061d8ba4, cluster identity 4711 [ 123.943341][T10905] tipc: Enabled bearer , priority 0 [ 123.975674][T10905] tipc: Disabling bearer [ 124.315367][T10932] loop4: detected capacity change from 0 to 128 [ 124.317672][T10932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 124.354363][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.516526][T10951] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 124.572807][ T8816] team0: Port device syz_tun removed [ 124.642830][ T3973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.642873][ T3973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.643061][ T3973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 124.734772][ T3973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.745295][ T3973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.755816][ T3973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 124.830296][T10974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.872582][ T3973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.872626][ T3973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.872732][ T3973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 124.916763][ T3973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.916804][ T3973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.916870][ T3973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 125.040207][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.045383][ T3973] bridge_slave_1: left allmulticast mode [ 125.047719][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.053396][ T3973] bridge_slave_1: left promiscuous mode [ 125.060834][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.066541][ T3973] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.085996][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.086045][ T3973] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.093611][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.107952][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.115423][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.122986][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.130497][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.137970][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.146487][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 125.222650][ T3973] batman_adv: batadv0: Interface deactivated: macvtap1 [ 125.230589][ T3973] bridge0 (unregistering): left allmulticast mode [ 125.239502][ T3973] batman_adv: batadv0: Removing interface: macvtap1 [ 125.333036][ T3973] bond2 (unregistering): (slave bridge2): Releasing active interface [ 125.392860][ T3973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.403309][ T3973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.413136][ T3973] bond0 (unregistering): Released all slaves [ 125.423402][ T3973] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 125.432162][ T3973] veth1_vlan: left allmulticast mode [ 125.439208][ T3973] bond1 (unregistering): Released all slaves [ 125.448249][ T3973] bond2 (unregistering): Released all slaves [ 125.457240][ T3973] bond3 (unregistering): Released all slaves [ 125.489133][T10971] chnl_net:caif_netlink_parms(): no params data found [ 125.508443][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 125.508460][ T29] audit: type=1326 audit(1761020380.994:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.546110][ T29] audit: type=1326 audit(1761020381.024:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.569727][ T29] audit: type=1326 audit(1761020381.034:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.593314][ T29] audit: type=1326 audit(1761020381.034:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.616879][ T29] audit: type=1326 audit(1761020381.034:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.640534][ T29] audit: type=1326 audit(1761020381.034:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.664139][ T29] audit: type=1326 audit(1761020381.034:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.679129][T11067] loop5: detected capacity change from 0 to 7 [ 125.687783][ T29] audit: type=1326 audit(1761020381.034:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.687813][ T29] audit: type=1326 audit(1761020381.034:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.741041][ T29] audit: type=1326 audit(1761020381.034:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11064 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1251efc9 code=0x7ffc0000 [ 125.804698][ T3973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.812155][ T3973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.820287][ T3973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.827721][ T3973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.848571][ T3973] veth1_macvtap: left promiscuous mode [ 125.856439][ T3973] veth0_macvtap: left promiscuous mode [ 125.862311][ T3973] veth1_vlan: left promiscuous mode [ 125.878761][ T3973] veth0_vlan: left promiscuous mode [ 126.008177][ T3973] team0 (unregistering): Port device team_slave_1 removed [ 126.038132][ T3973] team0 (unregistering): Port device team_slave_0 removed [ 126.135836][T10971] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.143069][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.155652][T10971] bridge_slave_0: entered allmulticast mode [ 126.164807][T10971] bridge_slave_0: entered promiscuous mode [ 126.172488][T10971] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.179647][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.186798][T11116] loop5: detected capacity change from 0 to 128 [ 126.187138][T10971] bridge_slave_1: entered allmulticast mode [ 126.200706][T10971] bridge_slave_1: entered promiscuous mode [ 126.226041][T11116] bio_check_eod: 32 callbacks suppressed [ 126.226058][T11116] syz.5.3200: attempt to access beyond end of device [ 126.226058][T11116] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 126.247100][T11116] syz.5.3200: attempt to access beyond end of device [ 126.247100][T11116] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 126.260662][T11116] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 126.271541][T11116] syz.5.3200: attempt to access beyond end of device [ 126.271541][T11116] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 126.274908][T10971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.285118][T11116] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 126.296744][T10971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.303124][T11116] syz.5.3200: attempt to access beyond end of device [ 126.303124][T11116] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 126.330061][T11116] syz.5.3200: attempt to access beyond end of device [ 126.330061][T11116] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 126.343583][T11116] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 126.359905][T10971] team0: Port device team_slave_0 added [ 126.366676][T10971] team0: Port device team_slave_1 added [ 126.383135][T11116] syz.5.3200: attempt to access beyond end of device [ 126.383135][T11116] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 126.396744][T11116] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 126.406326][T11116] syz.5.3200: attempt to access beyond end of device [ 126.406326][T11116] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 126.420560][T11116] syz.5.3200: attempt to access beyond end of device [ 126.420560][T11116] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 126.445902][T10971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.448634][T11116] syz.5.3200: attempt to access beyond end of device [ 126.448634][T11116] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 126.452922][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.466321][T11116] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 126.477760][T11116] syz.5.3200: attempt to access beyond end of device [ 126.477760][T11116] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 126.492255][T10971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.500732][T11116] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 126.534350][T10971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.541374][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.567683][T10971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.592864][T11116] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 126.601612][T11116] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 126.610801][T11116] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 126.619719][T11116] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 126.705873][T10971] hsr_slave_0: entered promiscuous mode [ 126.712354][T10971] hsr_slave_1: entered promiscuous mode [ 126.719243][T10971] debugfs: 'hsr0' already exists in 'hsr' [ 126.725045][T10971] Cannot create hsr debugfs directory [ 126.776123][T11158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 126.782668][T11158] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.790325][T11158] vhci_hcd vhci_hcd.0: Device attached [ 126.800303][T11159] vhci_hcd: connection closed [ 126.800471][ T3979] vhci_hcd: stop threads [ 126.809567][ T3979] vhci_hcd: release socket [ 126.813993][ T3979] vhci_hcd: disconnect device [ 126.854537][T10971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.863320][T10971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.872029][T10971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.881109][T10971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.915231][T10971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.927214][T10971] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.936376][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.943756][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.955208][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.962317][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.024034][T10971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.127129][T10971] veth0_vlan: entered promiscuous mode [ 127.134972][T10971] veth1_vlan: entered promiscuous mode [ 127.149975][T10971] veth0_macvtap: entered promiscuous mode [ 127.157393][T10971] veth1_macvtap: entered promiscuous mode [ 127.168313][T10971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.180240][T10971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.191120][ T3973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.201923][ T3973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.210903][ T3973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.223986][ T3973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.404540][T11206] loop4: detected capacity change from 0 to 256 [ 127.431504][T11206] FAT-fs (loop4): Directory bread(block 64) failed [ 127.494255][T11206] FAT-fs (loop4): Directory bread(block 65) failed [ 127.526290][T11206] FAT-fs (loop4): Directory bread(block 66) failed [ 127.533212][T11206] FAT-fs (loop4): Directory bread(block 67) failed [ 127.551357][T11206] FAT-fs (loop4): Directory bread(block 68) failed [ 127.566710][T11206] FAT-fs (loop4): Directory bread(block 69) failed [ 127.593091][T11206] FAT-fs (loop4): Directory bread(block 70) failed [ 127.599830][T11206] FAT-fs (loop4): Directory bread(block 71) failed [ 127.606497][T11206] FAT-fs (loop4): Directory bread(block 72) failed [ 127.614340][T11206] FAT-fs (loop4): Directory bread(block 73) failed [ 127.905823][T11239] xt_hashlimit: max too large, truncated to 1048576 [ 128.621185][T11262] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 128.802845][T11284] sd 0:0:1:0: device reset [ 128.927652][T11293] bridge0: port 5(batadv0) entered blocking state [ 128.934209][T11293] bridge0: port 5(batadv0) entered disabled state [ 128.958502][T11293] batadv0: entered allmulticast mode [ 128.968427][T11293] batadv0: entered promiscuous mode [ 129.042447][T11298] __nla_validate_parse: 26 callbacks suppressed [ 129.042468][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 129.063595][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 129.073119][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 129.082362][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 129.092567][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 129.190855][T11304] loop6: detected capacity change from 0 to 8192 [ 129.428841][ T4045] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 129.438174][ T4045] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 129.470431][T11304] ================================================================== [ 129.478559][T11304] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 129.485712][T11304] [ 129.488033][T11304] write to 0xffff88812cb9ab22 of 2 bytes by task 11308 on cpu 1: [ 129.495752][T11304] fat16_ent_put+0x28/0x60 [ 129.500269][T11304] fat_alloc_clusters+0x4d1/0xa80 [ 129.505326][T11304] fat_get_block+0x258/0x5e0 [ 129.509941][T11304] __block_write_begin_int+0x400/0xf90 [ 129.515505][T11304] cont_write_begin+0x5fc/0x970 [ 129.520365][T11304] fat_write_begin+0x4f/0xe0 [ 129.524960][T11304] cont_write_begin+0x1b0/0x970 [ 129.529816][T11304] fat_write_begin+0x4f/0xe0 [ 129.534411][T11304] generic_cont_expand_simple+0xb0/0x150 [ 129.540062][T11304] fat_cont_expand+0x3e/0x170 [ 129.544755][T11304] fat_fallocate+0x177/0x1c0 [ 129.549362][T11304] vfs_fallocate+0x3b6/0x400 [ 129.553951][T11304] __x64_sys_fallocate+0x7a/0xd0 [ 129.558916][T11304] x64_sys_call+0x2518/0x3000 [ 129.563605][T11304] do_syscall_64+0xd2/0x200 [ 129.568155][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.574053][T11304] [ 129.576390][T11304] read to 0xffff88812cb9aa00 of 512 bytes by task 11304 on cpu 0: [ 129.584189][T11304] fat_mirror_bhs+0x1df/0x320 [ 129.588883][T11304] fat_ent_write+0xd0/0xe0 [ 129.593306][T11304] fat_chain_add+0x15d/0x440 [ 129.597921][T11304] fat_get_block+0x46c/0x5e0 [ 129.602529][T11304] __block_write_begin_int+0x400/0xf90 [ 129.607995][T11304] cont_write_begin+0x5fc/0x970 [ 129.612846][T11304] fat_write_begin+0x4f/0xe0 [ 129.617434][T11304] generic_perform_write+0x184/0x490 [ 129.622734][T11304] __generic_file_write_iter+0x9e/0x120 [ 129.628319][T11304] generic_file_write_iter+0x8d/0x2f0 [ 129.633716][T11304] aio_write+0x2e5/0x410 [ 129.637969][T11304] io_submit_one+0xacd/0x11d0 [ 129.642668][T11304] __se_sys_io_submit+0xfb/0x280 [ 129.647607][T11304] __x64_sys_io_submit+0x43/0x50 [ 129.652633][T11304] x64_sys_call+0x2d6c/0x3000 [ 129.657322][T11304] do_syscall_64+0xd2/0x200 [ 129.661844][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.667756][T11304] [ 129.670109][T11304] Reported by Kernel Concurrency Sanitizer on: [ 129.676272][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.6.3258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.687654][T11304] Tainted: [W]=WARN [ 129.691457][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.701522][T11304] ==================================================================