last executing test programs: 16.250094819s ago: executing program 1 (id=2741): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x20e, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x8, 0x0, 0x20000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f00001d9000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xfe210b819e03098d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) 16.153379587s ago: executing program 1 (id=2742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 15.8703754s ago: executing program 1 (id=2745): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f00000015c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 13.705784574s ago: executing program 1 (id=2768): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(0x0, 0x64842, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 12.7713796s ago: executing program 1 (id=2779): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="800000000102010400000000000000000200000024000280140001"], 0x80}}, 0x0) 11.502907912s ago: executing program 1 (id=2794): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 11.502734972s ago: executing program 32 (id=2794): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.601529681s ago: executing program 4 (id=2904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000010300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004041}, 0x20004091) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 1.548786724s ago: executing program 4 (id=2907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.464318122s ago: executing program 4 (id=2910): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xc) 1.460314592s ago: executing program 5 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1.424937945s ago: executing program 4 (id=2913): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.320717633s ago: executing program 5 (id=2914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.273121847s ago: executing program 5 (id=2915): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.242176769s ago: executing program 0 (id=2916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1.239356s ago: executing program 5 (id=2917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) 1.156279597s ago: executing program 5 (id=2918): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r1, 0x280}], 0x1, 0x5) 1.128370049s ago: executing program 5 (id=2919): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) 901.569057ms ago: executing program 0 (id=2925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, 0x0, &(0x7f0000000200)='nilfs2\x00', 0x410, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 814.399664ms ago: executing program 0 (id=2929): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 755.026119ms ago: executing program 0 (id=2931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 484.26149ms ago: executing program 3 (id=2939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 459.726383ms ago: executing program 3 (id=2941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 424.714986ms ago: executing program 2 (id=2942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 424.337275ms ago: executing program 3 (id=2943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 413.125976ms ago: executing program 4 (id=2944): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}]) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_buf(r2, 0x29, 0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) 354.924511ms ago: executing program 2 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 323.015834ms ago: executing program 0 (id=2946): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x200) 295.981026ms ago: executing program 4 (id=2947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x0, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x6}]}, 0xf8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 235.97607ms ago: executing program 0 (id=2948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 235.245781ms ago: executing program 2 (id=2949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x4405be94, 0x521000) 230.219621ms ago: executing program 3 (id=2950): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 170.938356ms ago: executing program 2 (id=2951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 170.691985ms ago: executing program 2 (id=2952): socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 120.23908ms ago: executing program 3 (id=2953): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 95.805202ms ago: executing program 3 (id=2954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) 0s ago: executing program 2 (id=2955): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): 106.543638][ T29] audit: type=1326 audit(1755730904.592:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8501 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0566faebe9 code=0x7ffc0000 [ 106.543690][ T29] audit: type=1326 audit(1755730904.592:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8501 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0566fa5ba7 code=0x7ffc0000 [ 106.637984][ T8532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.678882][ T8532] bridge3: entered promiscuous mode [ 106.684163][ T8532] bridge3: entered allmulticast mode [ 106.691393][ T8532] bond2: (slave bridge3): making interface the new active one [ 106.700537][ T8532] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 107.024328][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 107.093800][ T8555] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 107.123071][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.141389][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 107.149995][ T8555] bond0: (slave batadv2): making interface the new active one [ 107.160885][ T8555] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 107.231081][ T8563] tipc: Enabling of bearer rejected, failed to enable media [ 108.167992][ T8572] loop2: detected capacity change from 0 to 512 [ 108.178411][ T8571] lo speed is unknown, defaulting to 1000 [ 108.193726][ T8572] EXT4-fs mount: 34 callbacks suppressed [ 108.193737][ T8572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.212967][ T8572] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.240642][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.463620][ T8584] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 109.472701][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 109.491505][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.517338][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 109.537913][ T8584] bond0: (slave veth1): Enslaving as an active interface with a down link [ 109.582035][ T8584] bridge3: entered promiscuous mode [ 109.587249][ T8584] bridge3: entered allmulticast mode [ 109.596970][ T8584] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 109.643926][ T8594] loop4: detected capacity change from 0 to 512 [ 109.662177][ T8600] loop0: detected capacity change from 0 to 128 [ 109.671520][ T8594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.709530][ T8594] EXT4-fs (loop4): 1 truncate cleaned up [ 109.715780][ T8594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.797074][ T8594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.851667][ T8600] bio_check_eod: 104 callbacks suppressed [ 109.851681][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.851681][ T8600] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 109.872378][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.872378][ T8600] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 109.886550][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.886550][ T8600] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 109.900084][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.900084][ T8600] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 109.914301][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.914301][ T8600] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 109.928101][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.928101][ T8600] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 109.941578][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.941578][ T8600] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 109.957693][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.957693][ T8600] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 109.971277][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.971277][ T8600] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 109.986449][ T8600] syz.0.1871: attempt to access beyond end of device [ 109.986449][ T8600] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 110.034180][ T8617] loop1: detected capacity change from 0 to 1024 [ 110.050479][ T8617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.114568][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.194038][ T8628] loop1: detected capacity change from 0 to 8192 [ 110.203118][ T8627] lo speed is unknown, defaulting to 1000 [ 110.321445][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1894'. [ 111.321238][ T8699] loop2: detected capacity change from 0 to 8192 [ 111.327961][ T8699] msdos: Unknown parameter 'dot lopp9O' [ 111.524263][ T8722] lo speed is unknown, defaulting to 1000 [ 111.579991][ T8730] siw: device registration error -23 [ 111.623486][ T8735] lo speed is unknown, defaulting to 1000 [ 111.672953][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 111.726490][ T8741] lo speed is unknown, defaulting to 1000 [ 111.752639][ T8749] : renamed from bond_slave_0 [ 111.859508][ T8755] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1938'. [ 111.975313][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 111.975327][ T29] audit: type=1326 audit(1755730909.742:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.005865][ T29] audit: type=1326 audit(1755730909.742:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.029345][ T29] audit: type=1326 audit(1755730909.742:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.052913][ T29] audit: type=1326 audit(1755730909.742:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.077102][ T29] audit: type=1326 audit(1755730909.742:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.101040][ T29] audit: type=1326 audit(1755730909.742:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.124784][ T29] audit: type=1326 audit(1755730909.770:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 112.191094][ T29] audit: type=1400 audit(1755730909.936:5220): avc: denied { mounton } for pid=8767 comm="syz.1.1944" path="/377/file0" dev="tmpfs" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.214511][ T29] audit: type=1400 audit(1755730909.936:5221): avc: denied { setattr } for pid=8767 comm="syz.1.1944" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.238014][ T29] audit: type=1400 audit(1755730909.982:5222): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.279138][ T8773] vlan0: entered allmulticast mode [ 112.374145][ T8783] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.455692][ T8783] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.498119][ T8789] veth0_to_team: entered promiscuous mode [ 112.516949][ T8783] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.555062][ T8795] loop1: detected capacity change from 0 to 512 [ 112.580309][ T8795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.593103][ T8795] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.605754][ T8795] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1956: corrupted inode contents [ 112.610875][ T8783] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.619998][ T8795] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1956: mark_inode_dirty error [ 112.638917][ T8795] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1956: corrupted inode contents [ 112.651329][ T8795] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1956: mark_inode_dirty error [ 112.670105][ T8795] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1956: corrupted inode contents [ 112.695571][ T8795] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1956: mark_inode_dirty error [ 112.701860][ T4824] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.725072][ T8801] loop0: detected capacity change from 0 to 4096 [ 112.733529][ T4824] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.742097][ T4824] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.750318][ T4824] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.751010][ T8795] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1956: corrupted inode contents [ 112.771651][ T8799] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1956: corrupted inode contents [ 112.798034][ T8799] EXT4-fs error (device loop1): add_dirent_to_buf:2153: inode #2: comm syz.1.1956: mark_inode_dirty error [ 112.812035][ T8801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.827100][ T8807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8807 comm=syz.2.1959 [ 112.840290][ T8807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8807 comm=syz.2.1959 [ 112.884517][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.967184][ T8817] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 112.985437][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.988071][ T8817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 113.010566][ T8817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 113.020238][ T8817] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 113.063373][ T8817] bond7: (slave vti0): Error -95 calling set_mac_address [ 113.685080][ T8864] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 113.866538][ T8875] veth0_to_team: entered promiscuous mode [ 113.923774][ T8877] tipc: Enabled bearer , priority 0 [ 113.939069][ T8876] tipc: Resetting bearer [ 113.967238][ T8876] tipc: Disabling bearer [ 114.174691][ T8899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8899 comm=syz.1.2005 [ 114.178126][ T8898] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 114.187974][ T8899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8899 comm=syz.1.2005 [ 114.253888][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 114.307949][ T8905] veth0_to_team: entered promiscuous mode [ 114.364124][ T8909] loop1: detected capacity change from 0 to 1024 [ 114.391019][ T8909] EXT4-fs: Ignoring removed orlov option [ 114.415959][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.564308][ T8924] siw: device registration error -23 [ 114.648812][ T8930] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8930 comm=syz.4.2011 [ 114.661988][ T8930] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8930 comm=syz.4.2011 [ 114.737711][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.854330][ T8949] siw: device registration error -23 [ 114.867929][ T8950] veth0_to_team: entered promiscuous mode [ 114.958754][ T8963] lo speed is unknown, defaulting to 1000 [ 115.320488][ T8966] uprobe: syz.4.2027:8966 failed to unregister, leaking uprobe [ 115.333566][ T8970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8970 comm=syz.3.2029 [ 115.346117][ T8970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8970 comm=syz.3.2029 [ 115.446172][ T8978] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 115.685759][ T9011] syz_tun: entered allmulticast mode [ 115.712465][ T9008] loop4: detected capacity change from 0 to 8192 [ 115.759934][ T9018] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 115.773957][ T9018] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.783682][ T9024] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2053'. [ 115.799951][ T9018] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.808066][ T9018] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 115.819174][ T9018] bond6: (slave vti0): Error -95 calling set_mac_address [ 116.374032][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 117.101401][ T9109] netlink: 'syz.3.2088': attribute type 13 has an invalid length. [ 117.114026][ T9107] rdma_op ffff888104a18580 conn xmit_rdma 0000000000000000 [ 117.138670][ T9113] loop4: detected capacity change from 0 to 1024 [ 117.160514][ T9109] 8021q: adding VLAN 0 to HW filter on device $H [ 117.167617][ T9113] EXT4-fs: Ignoring removed orlov option [ 117.179204][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.192420][ T9109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.209394][ T3361] lo speed is unknown, defaulting to 1000 [ 117.215916][ T3361] syz0: Port: 1 Link ACTIVE [ 117.298335][ T9129] loop1: detected capacity change from 0 to 512 [ 117.313067][ T9129] EXT4-fs: Ignoring removed nobh option [ 117.335369][ T9129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.455233][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.490512][ T9136] lo speed is unknown, defaulting to 1000 [ 117.620693][ T9144] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2103'. [ 117.668095][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.754567][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 117.754582][ T29] audit: type=1326 audit(1755730915.068:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 117.785140][ T29] audit: type=1326 audit(1755730915.068:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 117.853184][ T29] audit: type=1326 audit(1755730915.068:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 117.877254][ T29] audit: type=1326 audit(1755730915.068:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 117.900769][ T29] audit: type=1326 audit(1755730915.068:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 118.070137][ T9170] loop0: detected capacity change from 0 to 1024 [ 118.077082][ T9170] EXT4-fs: Ignoring removed orlov option [ 118.095597][ T9170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.523722][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.828516][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2122'. [ 118.863574][ T9187] Falling back ldisc for ttyS3. [ 119.071830][ T9198] loop1: detected capacity change from 0 to 512 [ 119.103610][ T9198] EXT4-fs (loop1): too many log groups per flexible block group [ 119.111402][ T9198] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 119.123946][ T9198] EXT4-fs (loop1): mount failed [ 119.156488][ T29] audit: type=1326 audit(1755730916.369:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 119.180581][ T29] audit: type=1326 audit(1755730916.369:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 119.242486][ T9205] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2127'. [ 119.252507][ T29] audit: type=1326 audit(1755730916.406:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 119.276534][ T29] audit: type=1326 audit(1755730916.406:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 119.299979][ T29] audit: type=1326 audit(1755730916.406:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 119.765755][ T9219] lo speed is unknown, defaulting to 1000 [ 119.901921][ T9227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2147'. [ 119.929971][ T9229] loop0: detected capacity change from 0 to 512 [ 119.947862][ T9229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.960687][ T9226] Falling back ldisc for ttyS3. [ 119.962789][ T9229] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.985347][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2138: corrupted inode contents [ 119.997544][ T9229] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.2138: mark_inode_dirty error [ 120.011356][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2138: corrupted inode contents [ 120.023764][ T9229] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2138: mark_inode_dirty error [ 120.038213][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2138: corrupted inode contents [ 120.051402][ T9229] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.2138: mark_inode_dirty error [ 120.065690][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2138: corrupted inode contents [ 120.094148][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2138: corrupted inode contents [ 120.126809][ T9229] EXT4-fs error (device loop0): add_dirent_to_buf:2153: inode #2: comm syz.0.2138: mark_inode_dirty error [ 120.159676][ T9239] loop2: detected capacity change from 0 to 4096 [ 120.172445][ T9239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.188012][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.273682][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.286294][ T9253] loop4: detected capacity change from 0 to 1024 [ 120.299596][ T9256] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 120.335019][ T9256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.378396][ T9253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.406782][ T9267] bond3: (slave gretap1): making interface the new active one [ 120.420769][ T9267] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 120.428015][ T9262] lo speed is unknown, defaulting to 1000 [ 120.461848][ T9256] vlan0: entered allmulticast mode [ 120.467055][ T9256] bond3: entered allmulticast mode [ 120.472229][ T9256] gretap1: entered allmulticast mode [ 120.480931][ T9256] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 120.508372][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.613090][ T9270] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2152'. [ 120.934285][ T9290] loop4: detected capacity change from 0 to 4096 [ 120.944652][ T9290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.030816][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.080924][ T9298] netlink: 'syz.4.2162': attribute type 13 has an invalid length. [ 121.141962][ T9298] 8021q: adding VLAN 0 to HW filter on device $H [ 121.156226][ T9298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.179315][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=965 sclass=netlink_route_socket pid=9302 comm=syz.3.2166 [ 121.282885][ T9311] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 121.301257][ T9311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.321622][ T9308] Falling back ldisc for ttyS3. [ 121.361061][ T9317] loop2: detected capacity change from 0 to 1024 [ 121.379163][ T9311] bond7: (slave gretap2): making interface the new active one [ 121.414260][ T9311] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 121.434134][ T9318] vlan0: entered allmulticast mode [ 121.439265][ T9318] bond7: entered allmulticast mode [ 121.445168][ T9318] gretap2: entered allmulticast mode [ 121.459458][ T9317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.479944][ T9318] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 121.499664][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'. [ 121.521792][ T9322] lo speed is unknown, defaulting to 1000 [ 121.543048][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.571994][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'. [ 121.593374][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 121.712149][ T9330] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2176'. [ 121.813356][ T9336] loop1: detected capacity change from 0 to 4096 [ 121.823416][ T9336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.908887][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.297275][ T9346] loop2: detected capacity change from 0 to 1024 [ 122.303879][ T9346] EXT4-fs: Ignoring removed orlov option [ 122.313844][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.539764][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.229501][ T9367] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 123.272914][ T9367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.355889][ T9377] bond4: (slave gretap1): making interface the new active one [ 123.364767][ T9382] loop4: detected capacity change from 0 to 512 [ 123.372040][ T9377] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 123.412460][ T9367] vlan0: entered allmulticast mode [ 123.417614][ T9367] bond4: entered allmulticast mode [ 123.422737][ T9367] gretap1: entered allmulticast mode [ 123.446708][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.450448][ T9367] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.480260][ T9382] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.513364][ T9382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2197: corrupted inode contents [ 123.532589][ T9382] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2197: mark_inode_dirty error [ 123.585330][ T9382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2197: corrupted inode contents [ 123.608618][ T9382] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2197: mark_inode_dirty error [ 123.642667][ T9392] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 123.670421][ T9392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.679775][ T9382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2197: corrupted inode contents [ 123.708222][ T9382] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2197: mark_inode_dirty error [ 123.727808][ T9392] vlan0: entered allmulticast mode [ 123.732973][ T9392] bond5: entered allmulticast mode [ 123.741014][ T9382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2197: corrupted inode contents [ 123.762332][ T9387] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2197: corrupted inode contents [ 123.776279][ T9387] EXT4-fs error (device loop4): add_dirent_to_buf:2153: inode #2: comm syz.4.2197: mark_inode_dirty error [ 123.825210][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.957360][ T9405] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 124.017880][ T9405] 8021q: adding VLAN 0 to HW filter on device bond8 [ 124.072710][ T9406] lo speed is unknown, defaulting to 1000 [ 124.101897][ T9405] vlan0: entered allmulticast mode [ 124.107160][ T9405] bond8: entered allmulticast mode [ 124.165919][ T9411] netlink: 'syz.0.2205': attribute type 10 has an invalid length. [ 124.319281][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'. [ 124.334286][ T9417] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 124.338470][ T9418] IPv4: Oversized IP packet from 127.202.26.0 [ 124.441612][ T9428] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 124.457349][ T9428] 8021q: adding VLAN 0 to HW filter on device bond6 [ 124.505950][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.523026][ T9428] bond6: (slave batadv0): making interface the new active one [ 124.533861][ T9428] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 124.566594][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 124.566607][ T29] audit: type=1326 audit(1755730921.363:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.597570][ T29] audit: type=1326 audit(1755730921.363:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.621106][ T29] audit: type=1326 audit(1755730921.363:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.644592][ T29] audit: type=1326 audit(1755730921.363:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.668653][ T29] audit: type=1326 audit(1755730921.363:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.694129][ T29] audit: type=1326 audit(1755730921.437:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.717521][ T29] audit: type=1326 audit(1755730921.455:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.741622][ T29] audit: type=1326 audit(1755730921.455:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31238bd550 code=0x7ffc0000 [ 124.765015][ T29] audit: type=1326 audit(1755730921.455:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f31238c0417 code=0x7ffc0000 [ 124.788581][ T29] audit: type=1326 audit(1755730921.455:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31238bebe9 code=0x7ffc0000 [ 124.817213][ T9437] netlink: 'syz.3.2218': attribute type 1 has an invalid length. [ 124.830525][ T9437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.849267][ T9437] vlan0: entered allmulticast mode [ 124.855104][ T9437] bond4: entered allmulticast mode [ 124.922082][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 124.985493][ T9439] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2217'. [ 124.990949][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 125.066391][ T9447] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 125.427307][ T9470] lo speed is unknown, defaulting to 1000 [ 125.568489][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 125.616969][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 125.772857][ T9496] lo speed is unknown, defaulting to 1000 [ 125.773467][ T9498] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 125.800189][ T9498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.826994][ T9498] vlan2: entered allmulticast mode [ 125.832756][ T9498] bond6: entered allmulticast mode [ 125.833224][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 125.856658][ T9505] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 125.934688][ T9513] loop1: detected capacity change from 0 to 1024 [ 125.941987][ T9513] EXT4-fs: Ignoring removed oldalloc option [ 125.948561][ T9513] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 125.963483][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 125.970930][ T9513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.014740][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.140741][ T9528] netlink: 'syz.3.2250': attribute type 10 has an invalid length. [ 126.438772][ T9531] lo speed is unknown, defaulting to 1000 [ 126.686694][ T9543] loop0: detected capacity change from 0 to 1024 [ 126.706326][ T9543] EXT4-fs: Ignoring removed orlov option [ 126.714873][ T9543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.961757][ T9571] loop1: detected capacity change from 0 to 1024 [ 127.012335][ T9571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.024900][ T9571] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.104370][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.418322][ T4822] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 6) [ 127.441773][ T4822] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 127.454128][ T4822] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.454128][ T4822] [ 127.467396][ T4822] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 127.481875][ T4822] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 127.494134][ T4822] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.494134][ T4822] [ 127.543427][ T9587] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2272'. [ 127.571519][ T9589] batman_adv: batadv0: Adding interface: dummy0 [ 127.577901][ T9589] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 127.578927][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.607235][ T9589] batman_adv: batadv0: Interface activated: dummy0 [ 127.723330][ T9610] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2270'. [ 127.733188][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 127.787831][ T9620] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2284'. [ 127.796987][ T9620] netem: unknown loss type 0 [ 127.863079][ T9624] tipc: Enabled bearer , priority 0 [ 127.870666][ T9623] tipc: Resetting bearer [ 127.885216][ T9623] tipc: Disabling bearer [ 127.892102][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 127.909317][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 128.029530][ T9645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9645 comm=syz.2.2295 [ 128.083918][ T9650] bridge: RTM_NEWNEIGH with invalid ether address [ 128.095518][ T9652] : renamed from bond0 (while UP) [ 128.833650][ T9664] loop1: detected capacity change from 0 to 256 [ 128.848114][ T9664] vfat: Unknown parameter '?[J /ͨ[i`$&u+ 8eU7Y v U ֛>^є&͘gx{3G醾:Mo4<9߳Dƿ"صaB.ך[ۍMzS%+as CC8ǫ(s5ǺlFA.aptAX' [ 129.040097][ T9687] tipc: Enabling of bearer rejected, failed to enable media [ 129.214718][ T9720] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.275377][ T9720] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.340285][ T9720] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.417252][ T9720] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.498460][ T4860] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.509247][ T4822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.520894][ T4860] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.531502][ T4860] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.570065][ T9729] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 129.578936][ T9730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.622772][ T9730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.640645][ T9737] netlink: 'syz.3.2331': attribute type 7 has an invalid length. [ 129.687751][ T9730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.752372][ T9743] tipc: Failed to remove unknown binding: 66,1,1/2730542973:1435789091/1435789093 [ 129.753205][ T9730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.762438][ T9743] tipc: Failed to remove unknown binding: 66,1,1/2730542973:1435789091/1435789093 [ 129.780573][ T9743] tipc: Failed to remove unknown binding: 66,1,1/2730542973:1435789091/1435789093 [ 129.854848][ T4820] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.866239][ T4822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.877377][ T4822] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.888873][ T4822] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.189171][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 130.189185][ T29] audit: type=1326 audit(1755730926.550:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9764 comm="syz.2.2344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5939ebebe9 code=0x0 [ 130.247176][ T29] audit: type=1400 audit(1755730926.596:5509): avc: denied { write } for pid=9770 comm="syz.4.2348" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.271584][ T29] audit: type=1400 audit(1755730926.596:5510): avc: denied { open } for pid=9770 comm="syz.4.2348" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.296514][ T9771] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.296514][ T9771] program syz.4.2348 not setting count and/or reply_len properly [ 130.333477][ T29] audit: type=1400 audit(1755730926.652:5511): avc: denied { ioctl } for pid=9770 comm="syz.4.2348" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.339566][ T9774] lo speed is unknown, defaulting to 1000 [ 131.231146][ T9796] SELinux: failed to load policy [ 131.238325][ T9802] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.248097][ T9802] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.256443][ T29] audit: type=1400 audit(1755730927.510:5512): avc: denied { load_policy } for pid=9794 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.335209][ T9807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9807 comm=syz.3.2359 [ 131.347231][ T9809] loop1: detected capacity change from 0 to 1024 [ 131.354646][ T9807] netlink: 'syz.3.2359': attribute type 1 has an invalid length. [ 131.363883][ T9802] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.374339][ T9802] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.411218][ T9809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.427113][ T9807] bond5: (slave bridge7): making interface the new active one [ 131.437295][ T9807] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 131.446848][ T9802] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.456678][ T9802] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.483492][ T9809] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 131.542799][ T9802] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.552587][ T9802] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.596091][ T9817] vlan0: entered allmulticast mode [ 131.606563][ T29] audit: type=1400 audit(1755730927.861:5513): avc: denied { rename } for pid=9808 comm="syz.1.2371" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 131.629103][ T29] audit: type=1400 audit(1755730927.861:5514): avc: denied { rmdir } for pid=9808 comm="syz.1.2371" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.656600][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.669559][ T4834] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.677832][ T4834] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.687990][ T4834] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.697643][ T4834] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.709118][ T4834] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.717360][ T4834] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.737068][ T4834] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.745350][ T4834] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.768620][ T29] audit: type=1326 audit(1755730927.999:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 131.792690][ T29] audit: type=1326 audit(1755730927.999:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 131.822969][ T29] audit: type=1326 audit(1755730928.055:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 131.851445][ T9827] hub 6-0:1.0: USB hub found [ 131.857115][ T9827] hub 6-0:1.0: 8 ports detected [ 131.900187][ T9835] loop4: detected capacity change from 0 to 512 [ 131.929043][ T9839] __nla_validate_parse: 7 callbacks suppressed [ 131.929133][ T9839] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2370'. [ 131.969976][ T9843] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 131.991749][ T9843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 132.001258][ T9843] bond7: (slave bond8): making interface the new active one [ 132.009179][ T9843] bond7: (slave bond8): Enslaving as an active interface with an up link [ 132.020132][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 132.029433][ T9843] bond7: entered promiscuous mode [ 132.034498][ T9843] bond8: entered promiscuous mode [ 132.039634][ T9843] bond7: entered allmulticast mode [ 132.044750][ T9843] bond8: entered allmulticast mode [ 132.051151][ T9843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.278118][ T9880] netlink: 'syz.3.2391': attribute type 3 has an invalid length. [ 132.724968][ T9910] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 132.800246][ T9916] 9pnet: Could not find request transport: f0x0000000000000006 [ 133.072108][ T9941] lo speed is unknown, defaulting to 1000 [ 133.073154][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 133.275602][ T9953] lo speed is unknown, defaulting to 1000 [ 133.334830][ T9957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2420'. [ 134.003406][ T9989] lo speed is unknown, defaulting to 1000 [ 134.004743][ T9993] loop0: detected capacity change from 0 to 512 [ 134.055413][ T9993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.141725][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.772374][T10017] netlink: 'syz.0.2443': attribute type 30 has an invalid length. [ 134.781800][T10014] lo speed is unknown, defaulting to 1000 [ 135.058997][T10034] capability: warning: `syz.1.2452' uses 32-bit capabilities (legacy support in use) [ 135.083522][T10043] loop0: detected capacity change from 0 to 512 [ 135.096105][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 135.132320][T10043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.170393][T10043] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2455: corrupted in-inode xattr: overlapping e_value [ 135.186888][T10043] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2455: couldn't read orphan inode 15 (err -117) [ 135.210088][T10043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.311722][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2460'. [ 135.471626][T10076] lo speed is unknown, defaulting to 1000 [ 135.600098][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.646778][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 135.646792][ T29] audit: type=1400 audit(1755730931.590:5753): avc: denied { create } for pid=10093 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.673479][ T29] audit: type=1400 audit(1755730931.590:5754): avc: denied { sys_module } for pid=10093 comm="syz.4.2468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 135.696017][ T29] audit: type=1400 audit(1755730931.599:5755): avc: denied { setopt } for pid=10093 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.715851][ T29] audit: type=1400 audit(1755730931.608:5756): avc: denied { create } for pid=10095 comm="syz.2.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 135.735680][ T29] audit: type=1400 audit(1755730931.608:5757): avc: denied { read } for pid=10087 comm="syz.1.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.756503][ T29] audit: type=1400 audit(1755730931.608:5758): avc: denied { sys_admin } for pid=10095 comm="syz.2.2469" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 135.766883][T10096] lo speed is unknown, defaulting to 1000 [ 135.821615][T10104] $H: (slave bond_slave_0): Releasing backup interface [ 135.833368][T10104] bond_slave_0: left promiscuous mode [ 135.852038][T10104] $H: (slave bond_slave_1): Releasing backup interface [ 135.874897][T10104] bond_slave_1: left promiscuous mode [ 135.898293][ T29] audit: type=1400 audit(1755730931.811:5759): avc: denied { create } for pid=10109 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.918121][ T29] audit: type=1400 audit(1755730931.811:5760): avc: denied { read } for pid=10109 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.951791][T10104] team0: Port device team_slave_0 removed [ 135.958556][T10104] team0: Port device team_slave_1 removed [ 135.964767][T10104] bond1: (slave bridge1): Releasing active interface [ 135.987409][ T29] audit: type=1400 audit(1755730931.867:5761): avc: denied { create } for pid=10103 comm="syz.1.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.007083][ T29] audit: type=1400 audit(1755730931.867:5762): avc: denied { ioctl } for pid=10103 comm="syz.1.2471" path="socket:[31904]" dev="sockfs" ino=31904 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.064222][T10104] bond2: (slave gretap1): Releasing active interface [ 136.084509][T10104] gretap1: left allmulticast mode [ 136.102302][T10104] bond3: (slave veth3): Releasing active interface [ 136.108992][T10104] bond3: (slave veth3): the permanent HWaddr of slave - a2:da:0d:28:6c:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 136.134336][T10104] bond3: (slave bridge0): Releasing active interface [ 136.146741][T10104] batadv1: left allmulticast mode [ 136.151820][T10104] batadv1: left promiscuous mode [ 136.152348][T10136] loop2: detected capacity change from 0 to 512 [ 136.156863][T10104] bridge0: port 1(batadv1) entered disabled state [ 136.172826][T10104] bond4: (slave batadv0): Releasing active interface [ 136.182377][T10136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.195293][T10104] bond5: (slave ip6gretap1): Removing an active aggregator [ 136.204914][T10104] bond5: (slave ip6gretap1): Releasing backup interface [ 136.222008][T10104] ip6gretap1: left promiscuous mode [ 136.227282][T10104] ip6gretap1: left allmulticast mode [ 136.238179][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.250811][T10104] bond0: (slave batadv2): Releasing active interface [ 136.269915][T10104] bond7: (slave bond8): Releasing backup interface [ 136.276686][T10104] bond8: left promiscuous mode [ 136.281558][T10104] bond8: left allmulticast mode [ 136.299767][T10111] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 136.315238][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 136.473674][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 136.487115][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.496024][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.504996][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 136.524285][T10143] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2486'. [ 136.689995][T10188] netlink: 'syz.3.2511': attribute type 30 has an invalid length. [ 136.850282][T10196] loop2: detected capacity change from 0 to 512 [ 136.859265][T10196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.888596][T10196] EXT4-fs (loop2): 1 orphan inode deleted [ 136.894354][T10196] EXT4-fs (loop2): 1 truncate cleaned up [ 136.900420][T10196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.932063][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.995878][T10219] loop4: detected capacity change from 0 to 128 [ 137.045736][T10224] netlink: 'syz.4.2518': attribute type 30 has an invalid length. [ 137.452227][T10255] loop1: detected capacity change from 0 to 512 [ 137.461096][T10255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.478398][T10255] EXT4-fs (loop1): 1 orphan inode deleted [ 137.484139][T10255] EXT4-fs (loop1): 1 truncate cleaned up [ 137.537517][T10255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.595927][T10267] loop2: detected capacity change from 0 to 164 [ 137.618087][T10267] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.635464][T10267] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.647808][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.660383][T10267] Symlink component flag not implemented [ 137.666029][T10267] Symlink component flag not implemented [ 137.681932][T10267] Symlink component flag not implemented (7) [ 137.687923][T10267] Symlink component flag not implemented (116) [ 137.702718][T10271] bond9: entered promiscuous mode [ 137.708247][T10271] bond9: entered allmulticast mode [ 137.713560][T10271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 137.722746][T10271] bond9 (unregistering): Released all slaves [ 137.729081][T10274] loop1: detected capacity change from 0 to 128 [ 137.785435][T10284] netlink: zone id is out of range [ 137.790642][T10284] netlink: zone id is out of range [ 137.795800][T10284] netlink: zone id is out of range [ 137.801002][T10284] netlink: zone id is out of range [ 137.806280][T10284] netlink: zone id is out of range [ 137.812736][T10284] netlink: zone id is out of range [ 137.829049][T10284] netlink: zone id is out of range [ 137.850395][T10284] netlink: zone id is out of range [ 137.865570][T10284] netlink: zone id is out of range [ 137.867793][T10282] netlink: 'syz.1.2533': attribute type 30 has an invalid length. [ 137.903879][T10294] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 137.956839][T10301] __nla_validate_parse: 1 callbacks suppressed [ 137.956852][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 138.237170][T10327] loop0: detected capacity change from 0 to 128 [ 138.262153][T10329] lo speed is unknown, defaulting to 1000 [ 138.349165][T10339] netlink: 'syz.2.2556': attribute type 30 has an invalid length. [ 138.627889][T10358] IPVS: Error connecting to the multicast addr [ 138.848198][T10374] loop1: detected capacity change from 0 to 128 [ 138.933760][T10380] loop2: detected capacity change from 0 to 512 [ 138.940783][T10380] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.953695][T10380] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2569: corrupted in-inode xattr: overlapping e_value [ 138.968303][T10380] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2569: couldn't read orphan inode 15 (err -117) [ 138.988782][T10380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.105510][T10387] netlink: 'syz.1.2571': attribute type 30 has an invalid length. [ 139.240399][T10393] loop0: detected capacity change from 0 to 512 [ 139.286490][T10393] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.311681][T10393] EXT4-fs (loop0): 1 orphan inode deleted [ 139.317469][T10393] EXT4-fs (loop0): 1 truncate cleaned up [ 139.326790][T10393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.377934][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.380648][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.410022][T10404] loop0: detected capacity change from 0 to 1024 [ 139.417115][T10404] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 139.448775][T10404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.471108][T10413] netlink: 'syz.3.2579': attribute type 21 has an invalid length. [ 139.479210][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 139.556199][T10423] loop1: detected capacity change from 0 to 128 [ 139.577046][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.651397][T10433] loop1: detected capacity change from 0 to 512 [ 139.662013][T10433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.674257][T10433] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2587: corrupted in-inode xattr: overlapping e_value [ 139.699824][T10433] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2587: couldn't read orphan inode 15 (err -117) [ 139.723381][T10433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.764806][T10435] lo speed is unknown, defaulting to 1000 [ 139.854238][T10440] loop0: detected capacity change from 0 to 2048 [ 139.904956][T10440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.075192][ T3301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 140.101412][ T3301] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 140.112229][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.129007][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.365324][T10452] loop4: detected capacity change from 0 to 1024 [ 140.383109][T10452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.460680][T10452] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2593: Allocating blocks 449-513 which overlap fs metadata [ 140.536866][T10451] EXT4-fs (loop4): pa ffff8881072629a0: logic 48, phys. 177, len 21 [ 140.545594][T10451] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 140.580315][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.623598][T10458] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 140.662473][T10461] loop2: detected capacity change from 0 to 1024 [ 140.686320][T10461] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 140.743782][T10461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.800402][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.898059][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 141.060581][T10497] lo speed is unknown, defaulting to 1000 [ 141.083257][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 141.083270][ T29] audit: type=1326 audit(1755730936.611:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.173011][ T29] audit: type=1326 audit(1755730936.648:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.196538][ T29] audit: type=1326 audit(1755730936.657:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.220683][ T29] audit: type=1326 audit(1755730936.666:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.244198][ T29] audit: type=1326 audit(1755730936.685:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.372414][T10500] netlink: 'syz.0.2610': attribute type 21 has an invalid length. [ 141.400724][ T29] audit: type=1326 audit(1755730936.694:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.425651][ T29] audit: type=1326 audit(1755730936.786:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.449195][ T29] audit: type=1326 audit(1755730936.814:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.474040][ T29] audit: type=1326 audit(1755730936.860:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.497630][ T29] audit: type=1326 audit(1755730936.869:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.4.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7d8a1febe9 code=0x7ffc0000 [ 141.504179][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'. [ 141.798578][T10514] loop0: detected capacity change from 0 to 512 [ 141.893209][T10514] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.930179][T10514] EXT4-fs (loop0): mount failed [ 141.963213][T10529] netlink: 'syz.4.2622': attribute type 1 has an invalid length. [ 142.004855][T10529] bond9: (slave veth7): Enslaving as an active interface with a down link [ 142.018785][T10529] bond9: entered promiscuous mode [ 142.023865][T10529] bond9: entered allmulticast mode [ 142.029263][T10529] 8021q: adding VLAN 0 to HW filter on device bond9 [ 142.051262][T10534] pim6reg1: entered promiscuous mode [ 142.056554][T10534] pim6reg1: entered allmulticast mode [ 142.111703][T10540] $H: renamed from bond0 [ 142.119553][T10540] $H: entered promiscuous mode [ 142.381306][T10541] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2626'. [ 142.411752][T10562] lo speed is unknown, defaulting to 1000 [ 142.488608][T10566] loop4: detected capacity change from 0 to 512 [ 142.575831][T10566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.586946][T10566] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2636: corrupted in-inode xattr: overlapping e_value [ 142.614036][T10566] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2636: couldn't read orphan inode 15 (err -117) [ 142.633593][T10566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.691242][T10572] syzkaller0: entered allmulticast mode [ 142.760907][T10572] syzkaller0 (unregistering): left allmulticast mode [ 143.030653][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.861316][T10592] loop2: detected capacity change from 0 to 512 [ 143.868040][T10592] EXT4-fs: Ignoring removed nobh option [ 143.891484][T10592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.976752][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.263550][T10611] netlink: 'syz.1.2651': attribute type 13 has an invalid length. [ 144.331005][T10611] 8021q: adding VLAN 0 to HW filter on device $H [ 144.337982][T10602] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2647'. [ 144.347895][T10611] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.369910][T10611] net_ratelimit: 2 callbacks suppressed [ 144.369940][T10611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.514432][T10622] loop0: detected capacity change from 0 to 1024 [ 144.541472][T10622] EXT4-fs: Ignoring removed orlov option [ 144.551845][T10622] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 144.595309][T10622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.676535][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.746680][T10634] loop0: detected capacity change from 0 to 164 [ 144.755160][T10634] bio_check_eod: 96 callbacks suppressed [ 144.755174][T10634] wޡ: attempt to access beyond end of device [ 144.755174][T10634] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 144.792726][T10634] wޡ: attempt to access beyond end of device [ 144.792726][T10634] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 144.819332][T10637] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.898866][T10637] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.930920][T10637] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.985395][T10637] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.046388][ T3755] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.062905][ T3755] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.081444][ T3755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.096698][ T3755] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.159908][T10641] loop1: detected capacity change from 0 to 164 [ 145.171324][T10641] wޡ: attempt to access beyond end of device [ 145.171324][T10641] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.184985][T10641] wޡ: attempt to access beyond end of device [ 145.184985][T10641] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.189899][T10643] loop4: detected capacity change from 0 to 512 [ 145.205396][T10643] EXT4-fs: Ignoring removed nobh option [ 145.214458][T10643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.273724][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.914034][T10661] loop0: detected capacity change from 0 to 128 [ 145.977172][T10664] batman_adv: batadv0: Interface deactivated: dummy0 [ 145.984019][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984019][T10666] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 145.984229][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984229][T10666] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 145.984261][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984261][T10666] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 145.984386][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984386][T10666] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 145.984421][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984421][T10666] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 145.984457][T10666] syz.0.2664: attempt to access beyond end of device [ 145.984457][T10666] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 146.068041][T10664] batman_adv: batadv0: Removing interface: dummy0 [ 146.152421][T10664] bond4: (slave batadv0): Releasing active interface [ 146.178190][T10664] bond7: (slave gretap2): Releasing active interface [ 146.190123][T10664] gretap2: left allmulticast mode [ 146.222039][T10664] bond9: (slave veth7): Releasing active interface [ 146.267825][T10667] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 146.807119][T10662] loop2: detected capacity change from 0 to 1024 [ 146.858238][T10662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.882899][T10662] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.029283][T10675] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2670'. [ 147.114148][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 147.114161][ T29] audit: type=1326 audit(1755730942.167:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2056afebe9 code=0x7ffc0000 [ 147.144528][ T29] audit: type=1326 audit(1755730942.167:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2056afebe9 code=0x7ffc0000 [ 147.169002][T10687] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.180156][T10687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.213378][ T29] audit: type=1326 audit(1755730942.241:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2056afebe9 code=0x7ffc0000 [ 147.236963][ T29] audit: type=1326 audit(1755730942.241:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2056afec23 code=0x7ffc0000 [ 147.260871][ T29] audit: type=1326 audit(1755730942.250:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2056afd69f code=0x7ffc0000 [ 147.284228][ T29] audit: type=1326 audit(1755730942.250:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2056afec77 code=0x7ffc0000 [ 147.308266][ T29] audit: type=1326 audit(1755730942.250:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2056afd550 code=0x7ffc0000 [ 147.331846][ T29] audit: type=1326 audit(1755730942.250:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2056afd84a code=0x7ffc0000 [ 147.355819][ T29] audit: type=1326 audit(1755730942.250:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2056afebe9 code=0x7ffc0000 [ 147.380007][ T29] audit: type=1326 audit(1755730942.250:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2056afebe9 code=0x7ffc0000 [ 147.404039][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.472038][T10690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.489811][T10687] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.501034][T10687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.523567][T10696] tipc: Enabling of bearer rejected, failed to enable media [ 147.543352][T10690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.584867][T10687] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.594663][T10687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.631034][T10690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.666224][T10700] lo speed is unknown, defaulting to 1000 [ 147.716537][T10687] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.726298][T10687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.751904][T10690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.806792][ T3755] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.816331][ T3755] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.847727][ T3755] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.857485][ T3755] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.886534][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'. [ 147.886959][ T3755] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.905061][ T3755] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.945073][ T3755] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.953259][ T3755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.570113][T10721] hub 6-0:1.0: USB hub found [ 148.574970][T10721] hub 6-0:1.0: 8 ports detected [ 148.580213][T10723] tipc: Enabled bearer , priority 0 [ 148.645249][T10723] syzkaller0: entered promiscuous mode [ 148.650836][T10723] syzkaller0: entered allmulticast mode [ 148.660132][T10723] tipc: Resetting bearer [ 148.689552][T10729] netlink: 'syz.2.2694': attribute type 12 has an invalid length. [ 148.697371][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 148.713998][ T4823] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.714018][T10729] netlink: 'syz.2.2694': attribute type 12 has an invalid length. [ 148.714032][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 148.740076][ T4823] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.755278][T10722] tipc: Resetting bearer [ 148.772898][T10722] tipc: Disabling bearer [ 148.780439][ T4823] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.790491][ T4823] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.793476][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 148.819804][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 148.847210][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 148.865966][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 148.885618][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 148.929971][T10742] loop1: detected capacity change from 0 to 512 [ 148.940777][T10742] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 148.951078][T10742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.957707][T10742] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2707: Failed to acquire dquot type 1 [ 148.972455][T10742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2707: bg 0: block 40: padding at end of block bitmap is not set [ 148.987043][T10742] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 148.997429][T10742] EXT4-fs (loop1): 1 truncate cleaned up [ 149.003530][T10742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.020894][T10742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.047799][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.486948][ T3755] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.508384][ T3755] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.525386][ T3755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.543941][ T3755] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.700033][T10764] bridge0: port 1(veth1_to_hsr) entered blocking state [ 149.706959][T10764] bridge0: port 1(veth1_to_hsr) entered disabled state [ 149.716565][T10764] veth1_to_hsr: entered allmulticast mode [ 149.723204][T10764] veth1_to_hsr: entered promiscuous mode [ 149.729657][T10764] bridge0: port 1(veth1_to_hsr) entered blocking state [ 149.736577][T10764] bridge0: port 1(veth1_to_hsr) entered forwarding state [ 149.771568][T10764] __nla_validate_parse: 4 callbacks suppressed [ 149.771582][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 149.792311][T10764] bridge0: port 1(veth1_to_hsr) entered disabled state [ 149.802642][T10764] veth1_to_hsr (unregistering): left allmulticast mode [ 149.810865][T10764] veth1_to_hsr (unregistering): left promiscuous mode [ 149.817761][T10764] bridge0: port 1(veth1_to_hsr) entered disabled state [ 149.829613][T10764] hsr_slave_1 (unregistering): left promiscuous mode [ 149.882056][T10769] loop4: detected capacity change from 0 to 512 [ 149.899942][T10769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 149.909183][T10769] System zones: 0-2, 18-18, 34-34 [ 149.915136][T10769] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.922692][T10769] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2708: bg 0: block 248: padding at end of block bitmap is not set [ 149.940849][T10769] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2708: Failed to acquire dquot type 1 [ 149.952900][T10769] EXT4-fs (loop4): 1 orphan inode deleted [ 149.959028][ T3755] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 1 [ 149.973714][T10769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.009599][T10769] syz.4.2708 (10769) used greatest stack depth: 9280 bytes left [ 150.017686][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.042348][T10779] loop4: detected capacity change from 0 to 512 [ 150.052701][T10779] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 150.060733][T10779] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.069078][T10779] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2710: Failed to acquire dquot type 1 [ 150.082410][T10779] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2710: bg 0: block 40: padding at end of block bitmap is not set [ 150.098629][T10779] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 150.107727][T10779] EXT4-fs (loop4): 1 truncate cleaned up [ 150.114557][T10779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.132264][T10779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.158362][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.178637][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2712'. [ 150.239763][T10786] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 150.253722][T10790] loop2: detected capacity change from 0 to 2048 [ 150.264248][T10786] 8021q: adding VLAN 0 to HW filter on device bond10 [ 150.284963][T10786] vlan0: entered allmulticast mode [ 150.290083][T10786] bond10: entered allmulticast mode [ 150.300416][T10790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.332107][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.352715][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 150.409460][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 150.494196][T10803] hub 6-0:1.0: USB hub found [ 150.502020][T10803] hub 6-0:1.0: 8 ports detected [ 150.630015][T10812] tipc: Enabled bearer , priority 0 [ 150.643095][T10810] tipc: Resetting bearer [ 150.671443][T10810] tipc: Disabling bearer [ 151.023481][T10826] loop2: detected capacity change from 0 to 512 [ 151.044948][T10826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 151.053742][T10826] System zones: 0-2, 18-18, 34-34 [ 151.059055][T10826] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.103725][T10826] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2727: bg 0: block 248: padding at end of block bitmap is not set [ 151.133465][T10826] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2727: Failed to acquire dquot type 1 [ 151.167365][T10826] EXT4-fs (loop2): 1 orphan inode deleted [ 151.174763][ T4823] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 1 [ 151.191195][T10826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.229826][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.325940][T10838] netlink: 'syz.2.2731': attribute type 13 has an invalid length. [ 151.412918][T10838] 8021q: adding VLAN 0 to HW filter on device $H [ 151.429801][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.444969][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2732'. [ 151.455912][T10838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.475597][T10837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.490747][ T6670] lo speed is unknown, defaulting to 1000 [ 151.496481][ T6670] syz0: Port: 1 Link DOWN [ 151.579265][T10847] bridge0: port 1(veth1_to_hsr) entered blocking state [ 151.586240][T10847] bridge0: port 1(veth1_to_hsr) entered disabled state [ 151.593557][T10847] veth1_to_hsr: entered allmulticast mode [ 151.599812][T10847] veth1_to_hsr: entered promiscuous mode [ 151.616059][T10847] bridge0: port 1(veth1_to_hsr) entered blocking state [ 151.622946][T10847] bridge0: port 1(veth1_to_hsr) entered forwarding state [ 151.633908][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 151.646490][T10847] bridge0: port 1(veth1_to_hsr) entered disabled state [ 151.656360][T10847] veth1_to_hsr (unregistering): left allmulticast mode [ 151.663246][T10847] veth1_to_hsr (unregistering): left promiscuous mode [ 151.671366][T10847] bridge0: port 1(veth1_to_hsr) entered disabled state [ 151.680700][T10847] hsr_slave_1 (unregistering): left promiscuous mode [ 152.495218][T10851] loop2: detected capacity change from 0 to 512 [ 152.507917][T10851] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.513318][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'. [ 152.515198][T10851] EXT4-fs: inline encryption not supported [ 152.538998][T10851] EXT4-fs: test_dummy_encryption option not supported [ 152.640109][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 152.640128][ T29] audit: type=1400 audit(1755730947.271:6707): avc: denied { read } for pid=10860 comm="syz.2.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.963929][T10873] vlan0: entered allmulticast mode [ 152.969139][T10873] dummy0: entered allmulticast mode [ 153.171465][T10881] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 153.188868][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.210245][T10881] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 153.220932][T10881] bond0: (slave batadv1): making interface the new active one [ 153.229643][T10881] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 153.308045][T10886] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.349144][T10886] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.396186][ T29] audit: type=1400 audit(1755730947.973:6708): avc: denied { watch watch_reads } for pid=10888 comm="syz.4.2753" path="/579/file0" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.425849][T10886] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.455139][T10892] loop4: detected capacity change from 0 to 512 [ 153.461867][T10892] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.468405][T10892] EXT4-fs: inline encryption not supported [ 153.474296][T10892] EXT4-fs: test_dummy_encryption option not supported [ 153.474910][T10886] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.491871][T10893] loop0: detected capacity change from 0 to 512 [ 153.501953][T10893] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.511466][T10893] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.518057][T10893] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 153.527107][T10893] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 153.529276][T10896] loop4: detected capacity change from 0 to 1024 [ 153.536862][T10893] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2754: Failed to acquire dquot type 1 [ 153.545254][T10896] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 153.556900][T10893] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2754: bg 0: block 40: padding at end of block bitmap is not set [ 153.566650][T10896] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 153.584156][T10893] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 153.593164][T10896] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.600452][T10893] EXT4-fs (loop0): 1 truncate cleaned up [ 153.612922][T10896] EXT4-fs (loop4): invalid journal inode [ 153.617198][T10893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.622953][T10896] EXT4-fs (loop4): can't get journal size [ 153.644890][T10896] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.2757: blocks 2-2 from inode overlap system zone [ 153.658705][ T4855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.669104][ T4855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.678631][ T4855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.681745][T10896] EXT4-fs (loop4): failed to initialize system zone (-117) [ 153.694261][T10896] EXT4-fs (loop4): mount failed [ 153.738131][T10893] $H: left promiscuous mode [ 153.752886][T10893] wg2: left promiscuous mode [ 153.757515][T10893] wg2: left allmulticast mode [ 153.762963][T10901] loop4: detected capacity change from 0 to 128 [ 153.774273][T10893] veth0_to_team: left promiscuous mode [ 153.778988][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.787627][T10901] FAT-fs (loop4): Filesystem has been set read-only [ 153.794549][T10901] bio_check_eod: 33157 callbacks suppressed [ 153.794561][T10901] syz.4.2761: attempt to access beyond end of device [ 153.794561][T10901] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 153.811291][T10893] 0: left allmulticast mode [ 153.819642][T10893] hsr_slave_0: left allmulticast mode [ 153.825568][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.833418][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.842479][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.852157][T10901] syz.4.2761: attempt to access beyond end of device [ 153.852157][T10901] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 153.872582][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.881081][T10901] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.891388][T10901] syz.4.2761: attempt to access beyond end of device [ 153.891388][T10901] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 153.904876][T10893] bond1: left promiscuous mode [ 153.909734][T10893] bond1: left allmulticast mode [ 153.915596][T10901] syz.4.2761: attempt to access beyond end of device [ 153.915596][T10901] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 153.929071][T10903] syz.4.2761: attempt to access beyond end of device [ 153.929071][T10903] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 153.942359][T10903] Buffer I/O error on dev loop4, logical block 2065, async page read [ 153.952311][T10903] syz.4.2761: attempt to access beyond end of device [ 153.952311][T10903] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 153.965634][T10903] Buffer I/O error on dev loop4, logical block 2066, async page read [ 153.973736][T10903] syz.4.2761: attempt to access beyond end of device [ 153.973736][T10903] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 153.988286][T10903] Buffer I/O error on dev loop4, logical block 2067, async page read [ 153.996376][T10903] syz.4.2761: attempt to access beyond end of device [ 153.996376][T10903] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 154.009586][T10903] Buffer I/O error on dev loop4, logical block 2068, async page read [ 154.017836][T10903] syz.4.2761: attempt to access beyond end of device [ 154.017836][T10903] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 154.032077][T10903] Buffer I/O error on dev loop4, logical block 2069, async page read [ 154.040167][T10903] syz.4.2761: attempt to access beyond end of device [ 154.040167][T10903] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 154.053376][T10903] Buffer I/O error on dev loop4, logical block 2070, async page read [ 154.061452][T10903] Buffer I/O error on dev loop4, logical block 2071, async page read [ 154.061816][T10893] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 154.070931][T10903] Buffer I/O error on dev loop4, logical block 2072, async page read [ 154.086184][ T4855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.102770][T10901] Buffer I/O error on dev loop4, logical block 2065, async page read [ 154.111154][T10901] Buffer I/O error on dev loop4, logical block 2066, async page read [ 154.115615][T10899] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.148766][ T4855] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.157176][ T4855] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.177590][ T4855] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.186024][ T4855] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.198049][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.207589][T10899] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.221209][ T4855] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.229577][ T4855] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.240861][ T4855] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.249995][ T4855] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.260093][T10899] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.312995][T10899] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.721761][T10911] vlan0: entered allmulticast mode [ 155.108713][T10921] lo speed is unknown, defaulting to 1000 [ 155.126635][T10923] loop1: detected capacity change from 0 to 512 [ 155.154917][T10923] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.179854][T10923] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.192830][T10923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 155.238747][T10923] System zones: 1-12 [ 155.260574][T10923] EXT4-fs (loop1): 1 truncate cleaned up [ 155.266624][T10923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.307203][T10923] lo speed is unknown, defaulting to 1000 [ 155.365097][ T29] audit: type=1400 audit(1755730949.782:6709): avc: denied { write } for pid=10922 comm="syz.1.2768" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.416098][ T29] audit: type=1326 audit(1755730949.819:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.1.2768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0566faebe9 code=0x0 [ 155.548134][ T4855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.559638][ T4855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.577207][ T4855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.607049][ T4855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.616340][T10942] loop2: detected capacity change from 0 to 1024 [ 155.623429][T10942] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.634803][T10942] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 155.655168][T10942] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 155.677313][T10942] EXT4-fs (loop2): invalid journal inode [ 155.682965][T10942] EXT4-fs (loop2): can't get journal size [ 155.700861][T10942] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.2772: blocks 2-2 from inode overlap system zone [ 155.726697][T10942] EXT4-fs (loop2): failed to initialize system zone (-117) [ 155.741825][T10942] EXT4-fs (loop2): mount failed [ 155.781555][T10947] loop0: detected capacity change from 0 to 128 [ 155.814018][T10947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 155.823226][T10947] FAT-fs (loop0): Filesystem has been set read-only [ 155.831791][T10947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 155.839812][T10947] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 155.932879][ T29] audit: type=1326 audit(1755730950.308:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.2.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5939ebebe9 code=0x7ffc0000 [ 155.956401][ T29] audit: type=1326 audit(1755730950.308:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.2.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5939ebd550 code=0x7ffc0000 [ 155.980564][ T29] audit: type=1326 audit(1755730950.308:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.2.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5939ec0417 code=0x7ffc0000 [ 156.004090][ T29] audit: type=1326 audit(1755730950.308:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.2.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5939ebebe9 code=0x7ffc0000 [ 156.049154][ T3300] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /538/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.073943][ T3300] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.095735][ T3300] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /538/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.139723][ T3300] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.166084][ T3300] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /538/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.189084][T10957] bridge0: port 1(veth1_to_hsr) entered blocking state [ 156.195995][T10957] bridge0: port 1(veth1_to_hsr) entered disabled state [ 156.203554][T10957] veth1_to_hsr: entered allmulticast mode [ 156.209855][T10957] veth1_to_hsr: entered promiscuous mode [ 156.216119][ T3300] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.237613][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 156.247319][T10962] veth1_to_hsr (unregistering): left allmulticast mode [ 156.254216][T10962] veth1_to_hsr (unregistering): left promiscuous mode [ 156.260985][T10962] bridge0: port 1(veth1_to_hsr) entered disabled state [ 156.270013][ T3300] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /538/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.294211][ T3300] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.318572][T10962] hsr_slave_1 (unregistering): left promiscuous mode [ 156.362624][ T3300] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /538/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.414425][ T3300] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.839811][ T8474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.048985][T10984] loop0: detected capacity change from 0 to 2048 [ 157.065842][T10984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.114489][ T3301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 157.159244][ T3301] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 157.173928][ T4855] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 157.187458][ T4855] EXT4-fs (loop0): This should not happen!! Data will be lost [ 157.187458][ T4855] [ 157.197088][ T4855] EXT4-fs (loop0): Total free blocks count 0 [ 157.203085][ T4855] EXT4-fs (loop0): Free/Dirty block details [ 157.208987][ T4855] EXT4-fs (loop0): free_blocks=0 [ 157.213909][ T4855] EXT4-fs (loop0): dirty_blocks=1472 [ 157.220489][ T4855] EXT4-fs (loop0): Block reservation details [ 157.226813][ T4855] EXT4-fs (loop0): i_reserved_data_blocks=92 [ 157.244600][T10987] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1460 with error 28 [ 157.480493][T10999] lo speed is unknown, defaulting to 1000 [ 157.535043][T10999] chnl_net:caif_netlink_parms(): no params data found [ 157.566169][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.573266][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.580464][T10999] bridge_slave_0: entered allmulticast mode [ 157.588170][T10999] bridge_slave_0: entered promiscuous mode [ 157.594880][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.602017][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.609230][T10999] bridge_slave_1: entered allmulticast mode [ 157.615496][T10999] bridge_slave_1: entered promiscuous mode [ 157.631656][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.641673][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.660572][T10999] team0: Port device team_slave_0 added [ 157.666974][T10999] team0: Port device team_slave_1 added [ 157.680373][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.687792][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.714424][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.725660][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.732601][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.758849][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.782462][T10999] hsr_slave_0: entered promiscuous mode [ 157.788342][T10999] hsr_slave_1: entered promiscuous mode [ 157.794634][T10999] debugfs: 'hsr0' already exists in 'hsr' [ 157.800406][T10999] Cannot create hsr debugfs directory [ 157.856731][T10999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.864979][T10999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.874251][T10999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.882717][T10999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.896367][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.903464][T10999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.910770][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.917774][T10999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.946508][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.958658][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.967728][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.978571][T10999] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.988943][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.995987][ T4824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.007008][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.014046][ T4855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.068596][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.161202][T10999] veth0_vlan: entered promiscuous mode [ 158.168973][T10999] veth1_vlan: entered promiscuous mode [ 158.183084][T10999] veth0_macvtap: entered promiscuous mode [ 158.190168][T10999] veth1_macvtap: entered promiscuous mode [ 158.203333][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.215615][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.226906][ T4824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.235920][ T4824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.245038][ T4824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.253825][ T4824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.272614][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 158.272625][ T29] audit: type=1400 audit(1755730952.468:6793): avc: denied { mounton } for pid=10999 comm="syz-executor" path="/root/syzkaller.08uHw6/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 158.304243][ T29] audit: type=1400 audit(1755730952.468:6794): avc: denied { mount } for pid=10999 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.326486][ T29] audit: type=1400 audit(1755730952.468:6795): avc: denied { mounton } for pid=10999 comm="syz-executor" path="/root/syzkaller.08uHw6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 158.354062][ T29] audit: type=1400 audit(1755730952.468:6796): avc: denied { mounton } for pid=10999 comm="syz-executor" path="/root/syzkaller.08uHw6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 158.381809][ T29] audit: type=1400 audit(1755730952.496:6797): avc: denied { mounton } for pid=10999 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 158.406064][ T29] audit: type=1400 audit(1755730952.496:6798): avc: denied { mount } for pid=10999 comm="syz-executor" name="/" dev="gadgetfs" ino=3634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 158.430452][ T29] audit: type=1400 audit(1755730952.514:6799): avc: denied { add_name } for pid=10999 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.455183][ T29] audit: type=1400 audit(1755730952.514:6800): avc: denied { create } for pid=10999 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 158.476867][ T29] audit: type=1400 audit(1755730952.514:6801): avc: denied { associate } for pid=10999 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.511834][T11039] lo speed is unknown, defaulting to 1000 [ 158.517841][T11048] loop5: detected capacity change from 0 to 1024 [ 158.527188][T11048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.543234][ T29] audit: type=1400 audit(1755730952.717:6802): avc: denied { remount } for pid=11038 comm="syz.5.2795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.551191][T11048] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 158.586742][T11039] chnl_net:caif_netlink_parms(): no params data found [ 158.587760][ T6660] IPVS: starting estimator thread 0... [ 158.611418][T10999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.650187][T11063] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.662245][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.669425][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.676577][T11039] bridge_slave_0: entered allmulticast mode [ 158.684813][T11039] bridge_slave_0: entered promiscuous mode [ 158.690974][T11052] IPVS: using max 2976 ests per chain, 148800 per kthread [ 158.692157][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.705239][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.713735][T11039] bridge_slave_1: entered allmulticast mode [ 158.720407][T11039] bridge_slave_1: entered promiscuous mode [ 158.735026][T11063] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.772361][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.784937][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.802411][T11063] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.825489][T11039] team0: Port device team_slave_0 added [ 158.831911][T11039] team0: Port device team_slave_1 added [ 158.849706][T11063] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.861196][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.868571][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.895274][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.908901][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.915848][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.943518][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.971918][T11039] hsr_slave_0: entered promiscuous mode [ 158.977912][T11039] hsr_slave_1: entered promiscuous mode [ 158.983865][T11039] debugfs: 'hsr0' already exists in 'hsr' [ 158.989572][T11039] Cannot create hsr debugfs directory [ 159.244940][T11039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.253952][T11039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.262518][T11039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.270716][T11039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.286382][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.293482][T11039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.300747][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.308247][T11039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.338338][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.351790][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.360679][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.368357][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.382685][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.389720][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.402607][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.409763][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.467607][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.525435][T11039] veth0_vlan: entered promiscuous mode [ 159.533070][T11039] veth1_vlan: entered promiscuous mode [ 159.556306][T11039] veth0_macvtap: entered promiscuous mode [ 159.563414][T11039] veth1_macvtap: entered promiscuous mode [ 159.576233][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.587734][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.598570][ T4855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.608975][ T4855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.620596][ T4823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.629285][ T4823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.683564][T11086] loop4: detected capacity change from 0 to 1024 [ 159.699135][T11086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.716005][T11086] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2815: Allocating blocks 385-513 which overlap fs metadata [ 159.732843][T11086] EXT4-fs (loop4): pa ffff888107159460: logic 16, phys. 129, len 24 [ 159.740885][T11086] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 159.765453][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.405778][ T4823] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.418184][ T4823] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.429191][ T4855] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.440158][ T4855] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.474457][T11104] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.547182][T11104] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.598703][T11104] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.643804][T11104] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.692301][T11130] loop0: detected capacity change from 0 to 2048 [ 160.791485][T11130] loop0: p1 < > p4 [ 160.796136][T11130] loop0: p4 size 8388608 extends beyond EOD, truncated [ 160.880498][T11137] loop0: detected capacity change from 0 to 1024 [ 160.905096][T11137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.937403][T11137] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2823: Allocating blocks 449-513 which overlap fs metadata [ 160.939578][T11145] tmpfs: Unsupported parameter 'huge' [ 160.980683][T11137] SELinux: Context @ is not valid (left unmapped). [ 160.988240][T11137] EXT4-fs (loop0): pa ffff8881071594d0: logic 48, phys. 177, len 21 [ 160.996243][T11137] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 161.037857][T11039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.565713][ T3755] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.576342][ T3755] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.587731][ T3755] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.598382][ T4853] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.633337][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2833'. [ 164.705984][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 164.705998][ T29] audit: type=1400 audit(1755730958.412:6813): avc: denied { connect } for pid=11178 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.732920][ T29] audit: type=1400 audit(1755730958.440:6814): avc: denied { write } for pid=11178 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.789772][ T29] audit: type=1400 audit(1755730958.458:6815): avc: denied { write } for pid=11181 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.812565][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 164.835754][ T29] audit: type=1400 audit(1755730958.532:6816): avc: denied { ioctl } for pid=11185 comm="syz.2.2843" path="socket:[35729]" dev="sockfs" ino=35729 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.892788][T11195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.923325][ T29] audit: type=1400 audit(1755730958.606:6817): avc: denied { read } for pid=11199 comm="syz.2.2849" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.947851][ T29] audit: type=1400 audit(1755730958.606:6818): avc: denied { open } for pid=11199 comm="syz.2.2849" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.982262][T11202] netlink: 'syz.5.2850': attribute type 30 has an invalid length. [ 165.004279][ T29] audit: type=1326 audit(1755730958.680:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c194ebe9 code=0x7ffc0000 [ 165.028694][ T29] audit: type=1326 audit(1755730958.680:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c194ebe9 code=0x7ffc0000 [ 165.063113][T11195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.090193][T11207] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2852'. [ 165.101774][ T29] audit: type=1326 audit(1755730958.726:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f70c194ebe9 code=0x7ffc0000 [ 165.126169][ T29] audit: type=1326 audit(1755730958.726:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c194ebe9 code=0x7ffc0000 [ 165.170278][T11195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.212271][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2857'. [ 165.221414][T11220] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 165.286216][T11227] loop4: detected capacity change from 0 to 512 [ 165.301512][T11227] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.313026][T11195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.324178][T11227] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #17: comm syz.4.2862: iget: bad i_size value: -6917529027641081756 [ 165.338173][T11227] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2862: couldn't read orphan inode 17 (err -117) [ 165.362846][T11227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.380700][T11237] team0 (unregistering): Port device team_slave_0 removed [ 165.402408][T11237] team0 (unregistering): Port device team_slave_1 removed [ 165.410732][T11227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2862: bg 0: block 65: padding at end of block bitmap is not set [ 165.426862][T11227] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2862: Failed to acquire dquot type 0 [ 165.451489][T11239] lo speed is unknown, defaulting to 1000 [ 165.456678][ T4853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.468918][T11245] loop2: detected capacity change from 0 to 1024 [ 165.477522][T11245] EXT4-fs: Ignoring removed orlov option [ 165.484077][ T4823] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.515517][T11245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.548045][ T4823] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.569863][ T4824] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.596639][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.624700][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.707049][T11262] netlink: 'syz.3.2875': attribute type 3 has an invalid length. [ 165.715582][T11262] netlink: 'syz.3.2875': attribute type 3 has an invalid length. [ 166.474171][T11282] tipc: Enabling of bearer rejected, failed to enable media [ 166.600948][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 166.899652][T11319] syzkaller0: create flow: hash 430657615 index 1 [ 166.923644][T11315] loop2: detected capacity change from 0 to 512 [ 166.936828][T11317] netlink: '+}[@': attribute type 13 has an invalid length. [ 166.960397][T11315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 166.986220][T11315] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.005486][T11317] 8021q: adding VLAN 0 to HW filter on device $H [ 167.046182][T11317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.061775][ T3361] lo speed is unknown, defaulting to 1000 [ 167.068199][ T3361] syz0: Port: 1 Link ACTIVE [ 167.085325][T11305] syzkaller0: delete flow: hash 430657615 index 1 [ 167.116612][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 167.150925][T11328] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 167.223053][T11333] loop2: detected capacity change from 0 to 1024 [ 167.273705][T11333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.314715][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'. [ 167.621740][T11366] hub 6-0:1.0: USB hub found [ 167.626390][T11366] hub 6-0:1.0: 8 ports detected [ 167.700847][T11371] netlink: 'syz.5.2919': attribute type 1 has an invalid length. [ 167.716312][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 167.771724][T11380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.786439][T11380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.981921][T11393] sch_fq: defrate 4294967295 ignored. [ 168.066248][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.084618][T11399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.162641][T11407] loop2: detected capacity change from 0 to 512 [ 168.172919][T11399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.185727][T11407] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 168.238808][T11399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.324340][T11399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.425960][ T4823] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.446409][ T4823] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.457558][ T4823] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.466399][ T4823] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.525378][T11440] loop0: detected capacity change from 0 to 8192 [ 168.663614][T11454] $H: left promiscuous mode [ 168.682685][T11454] bridge1: left promiscuous mode [ 168.687640][T11454] bridge1: left allmulticast mode [ 168.726828][ T4853] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.742869][ T4853] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.751323][ T4853] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.773883][ T4853] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.844260][T11462] loop2: detected capacity change from 0 to 1024 [ 168.874140][T11462] EXT4-fs: Ignoring removed orlov option [ 168.930836][T11462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.045880][T11462] ================================================================== [ 169.053965][T11462] BUG: KCSAN: data-race in filemap_read / filemap_read [ 169.060804][T11462] [ 169.063116][T11462] write to 0xffff8881188d53a8 of 8 bytes by task 11465 on cpu 0: [ 169.070823][T11462] filemap_read+0x974/0xa00 [ 169.075316][T11462] generic_file_read_iter+0x79/0x330 [ 169.080597][T11462] ext4_file_read_iter+0x1cc/0x290 [ 169.085712][T11462] copy_splice_read+0x442/0x660 [ 169.090570][T11462] splice_direct_to_actor+0x290/0x680 [ 169.095933][T11462] do_splice_direct+0xda/0x150 [ 169.100693][T11462] do_sendfile+0x380/0x650 [ 169.105113][T11462] __x64_sys_sendfile64+0x105/0x150 [ 169.110313][T11462] x64_sys_call+0x2bb0/0x2ff0 [ 169.114989][T11462] do_syscall_64+0xd2/0x200 [ 169.119492][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.125383][T11462] [ 169.127700][T11462] read to 0xffff8881188d53a8 of 8 bytes by task 11462 on cpu 1: [ 169.135322][T11462] filemap_read+0x6f/0xa00 [ 169.139739][T11462] generic_file_read_iter+0x79/0x330 [ 169.145020][T11462] ext4_file_read_iter+0x1cc/0x290 [ 169.150136][T11462] copy_splice_read+0x442/0x660 [ 169.154997][T11462] splice_direct_to_actor+0x290/0x680 [ 169.160360][T11462] do_splice_direct+0xda/0x150 [ 169.165110][T11462] do_sendfile+0x380/0x650 [ 169.169515][T11462] __x64_sys_sendfile64+0x105/0x150 [ 169.174705][T11462] x64_sys_call+0x2bb0/0x2ff0 [ 169.179368][T11462] do_syscall_64+0xd2/0x200 [ 169.183859][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.189732][T11462] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.192034][T11462] value changed: 0x00000000000000df -> 0x00000000000000e0 [ 169.199113][T11462] [ 169.201413][T11462] Reported by Kernel Concurrency Sanitizer on: [ 169.207551][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.2.2955 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.218903][T11462] Tainted: [W]=WARN [ 169.222691][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.232726][T11462] ================================================================== [ 169.415379][ T3873] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.442118][ T3873] syz_tun (unregistering): left allmulticast mode [ 169.637956][ T4823] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.719406][ T4823] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.773804][ T4823] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.838616][ T4823] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.913207][ T4823] bridge_slave_1: left allmulticast mode [ 169.918885][ T4823] bridge_slave_1: left promiscuous mode [ 169.925283][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.933182][ T4823] bridge_slave_0: left allmulticast mode [ 169.938870][ T4823] bridge_slave_0: left promiscuous mode [ 169.944535][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.012176][ T4823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.022690][ T4823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.032007][ T4823] bond0 (unregistering): Released all slaves [ 170.068586][ T4823] hsr_slave_0: left promiscuous mode [ 170.074258][ T4823] hsr_slave_1: left promiscuous mode [ 170.079917][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.087688][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.098815][ T4823] veth1_macvtap: left promiscuous mode [ 170.104310][ T4823] veth0_macvtap: left promiscuous mode [ 170.109985][ T4823] veth1_vlan: left promiscuous mode [ 170.115184][ T4823] veth0_vlan: left promiscuous mode [ 170.160042][ T4823] team0 (unregistering): Port device team_slave_1 removed [ 170.170110][ T4823] team0 (unregistering): Port device team_slave_0 removed [ 170.490473][ T4823] IPVS: stop unused estimator thread 0... [ 171.073929][ T4823] $H (unregistering): Released all slaves [ 171.082089][ T4823] bond1 (unregistering): Released all slaves [ 171.090662][ T4823] bond2 (unregistering): Released all slaves [ 171.098762][ T4823] bond3 (unregistering): Released all slaves [ 171.106737][ T4823] bond4 (unregistering): Released all slaves [ 171.114592][ T4823] bond5 (unregistering): Released all slaves [ 171.122874][ T4823] bond6 (unregistering): Released all slaves [ 171.131101][ T4823] bond7 (unregistering): Released all slaves [ 171.139399][ T4823] bond8 (unregistering): Released all slaves [ 171.206545][ T4823] tipc: Left network mode [ 171.212374][ T4823] hsr_slave_0: left promiscuous mode [ 173.067848][ T4824] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.110586][ T4824] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.164935][ T4824] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.218997][ T4824] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.316116][ T4824] bridge_slave_1: left allmulticast mode [ 173.321757][ T4824] bridge_slave_1: left promiscuous mode [ 173.327407][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.335066][ T4824] bridge_slave_0: left allmulticast mode [ 173.340755][ T4824] bridge_slave_0: left promiscuous mode [ 173.346369][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.404439][ T4824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.414188][ T4824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.423441][ T4824] bond0 (unregistering): Released all slaves [ 173.481586][ T4824] hsr_slave_0: left promiscuous mode [ 173.487133][ T4824] hsr_slave_1: left promiscuous mode [ 173.492647][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.500053][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.507471][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.515214][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.524576][ T4824] veth1_macvtap: left promiscuous mode [ 173.530018][ T4824] veth0_macvtap: left promiscuous mode [ 173.535523][ T4824] veth1_vlan: left promiscuous mode [ 173.540705][ T4824] veth0_vlan: left promiscuous mode