last executing test programs: 1m29.592511043s ago: executing program 2 (id=2051): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f0000000040)) r1 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r1, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x10000018}) 1m28.696220845s ago: executing program 2 (id=2059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m28.683169496s ago: executing program 2 (id=2061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m28.666263168s ago: executing program 2 (id=2062): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m28.647898699s ago: executing program 2 (id=2064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r0, r2, 0x2f, 0x2028, 0x4}, 0x20) 1m28.312842065s ago: executing program 2 (id=2076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m28.312711276s ago: executing program 32 (id=2076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m20.524711881s ago: executing program 4 (id=2384): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x180) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1m20.490374383s ago: executing program 4 (id=2386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 1m20.399205451s ago: executing program 4 (id=2392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x4000000001}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000600)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 1m20.359254664s ago: executing program 4 (id=2396): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28200, 0x20) 1m19.949902806s ago: executing program 4 (id=2403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20044815}, 0x20000004) 1m19.65317434s ago: executing program 4 (id=2408): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1m19.629429052s ago: executing program 33 (id=2408): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 38.987043683s ago: executing program 3 (id=3842): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 38.935891876s ago: executing program 3 (id=3844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 38.853221443s ago: executing program 3 (id=3848): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 38.786678439s ago: executing program 3 (id=3851): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0\x00') 38.76518287s ago: executing program 3 (id=3852): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) 38.308607737s ago: executing program 3 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r2, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 38.264204471s ago: executing program 34 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r2, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 23.680525491s ago: executing program 6 (id=4218): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r2}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000400)={r3}) 23.68030393s ago: executing program 6 (id=4219): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 23.680100361s ago: executing program 6 (id=4220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23.576010469s ago: executing program 6 (id=4225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 23.575636469s ago: executing program 6 (id=4227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x7, 0x7) 23.362134426s ago: executing program 6 (id=4235): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 23.360312346s ago: executing program 35 (id=4235): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 1.309904795s ago: executing program 5 (id=5110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setgroups(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.271047588s ago: executing program 7 (id=5111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.270361518s ago: executing program 5 (id=5113): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) 1.212145243s ago: executing program 0 (id=5117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 1.212054133s ago: executing program 7 (id=5118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0x9, 0x0) 1.152647378s ago: executing program 7 (id=5131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x4044099, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 1.098069932s ago: executing program 1 (id=5122): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) 1.097752652s ago: executing program 7 (id=5123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 1.082137953s ago: executing program 0 (id=5124): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xf8}}, 0x0) 1.030082117s ago: executing program 1 (id=5125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setgroups(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.029764217s ago: executing program 8 (id=5127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x7ffff088) 983.107461ms ago: executing program 8 (id=5128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r3 = dup(r2) ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0) 968.014712ms ago: executing program 1 (id=5129): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) 946.249874ms ago: executing program 1 (id=5130): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) 945.830854ms ago: executing program 0 (id=5142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 931.073725ms ago: executing program 8 (id=5132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0x9, 0x0) 901.887948ms ago: executing program 0 (id=5134): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(r2, 0x4) 901.735438ms ago: executing program 7 (id=5135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x2, 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f00000002c0)="e7", 0x1, 0xa8f9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x142, 0x0) fallocate(r2, 0x0, 0x0, 0xffff) 894.236308ms ago: executing program 8 (id=5136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 864.350891ms ago: executing program 8 (id=5137): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000300)="96cbe6", 0x3}], 0x1) 88.948393ms ago: executing program 1 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 88.831763ms ago: executing program 5 (id=5139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x8044) 88.542543ms ago: executing program 0 (id=5149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 88.129863ms ago: executing program 7 (id=5150): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) 63.029035ms ago: executing program 0 (id=5140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x4044099, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 62.318655ms ago: executing program 5 (id=5141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) 42.129607ms ago: executing program 5 (id=5143): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) fchmod(0xffffffffffffffff, 0x10b) 24.295138ms ago: executing program 5 (id=5144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8a9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xf}, 0x18) unshare(0x20000400) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) vmsplice(r2, 0x0, 0x0, 0x7) 3.74484ms ago: executing program 8 (id=5145): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0x3a, 0xb22b, "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", 0x8, 0x6, 0x2, 0x8, 0xd, 0xff, 0x5}}}, 0x128) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x2, 0x0, 0x0, 0x2000000000000000}) 0s ago: executing program 1 (id=5146): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) kernel console output (not intermixed with test programs): al. Quota mode: writeback. [ 115.078649][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.139681][T11278] rdma_op ffff88811f3e8980 conn xmit_rdma 0000000000000000 [ 115.162589][T11280] netlink: 'syz.6.3356': attribute type 83 has an invalid length. [ 115.168426][T11282] loop3: detected capacity change from 0 to 1024 [ 115.191593][T11282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.245220][T11282] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3358: Allocating blocks 449-513 which overlap fs metadata [ 115.318712][T11281] EXT4-fs (loop3): pa ffff888106e21700: logic 48, phys. 177, len 21 [ 115.326789][T11281] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 115.371673][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.425287][T11298] loop3: detected capacity change from 0 to 512 [ 115.437634][T11298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.460471][T11298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 115.476212][T11298] System zones: 0-2, 18-18, 34-34 [ 115.489230][T11298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.504512][T11298] ext4 filesystem being mounted at /682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.534283][T11308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.541524][T11308] IPv6: NLM_F_CREATE should be set when creating new route [ 115.548757][T11308] IPv6: NLM_F_CREATE should be set when creating new route [ 115.556444][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.758014][T11324] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3373'. [ 115.970049][T11336] loop3: detected capacity change from 0 to 256 [ 115.991000][T11336] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 115.998933][T11336] FAT-fs (loop3): Filesystem has been set read-only [ 116.032111][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3383'. [ 116.122216][T11349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11349 comm=syz.0.3385 [ 116.597466][T11376] bond1: entered promiscuous mode [ 116.602640][T11376] bond1: entered allmulticast mode [ 116.994921][T11376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.033703][T11376] bond1 (unregistering): Released all slaves [ 117.125675][T11386] loop5: detected capacity change from 0 to 1024 [ 117.150430][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 117.170850][T11386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.237410][T11386] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.3397: Allocating blocks 449-513 which overlap fs metadata [ 117.295505][T11383] EXT4-fs (loop5): pa ffff888106e21690: logic 48, phys. 177, len 21 [ 117.303630][T11383] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 117.347908][ T8273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.360229][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3414'. [ 117.488773][T11433] pim6reg1: entered promiscuous mode [ 117.494123][T11433] pim6reg1: entered allmulticast mode [ 117.500671][T11431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11431 comm=syz.5.3420 [ 117.742751][T11454] loop6: detected capacity change from 0 to 1024 [ 117.751743][ T3781] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.761914][T11454] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.774330][T11454] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 117.809812][ T3781] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.861046][ T3781] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.889338][T11455] lo speed is unknown, defaulting to 1000 [ 117.970548][ T3781] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.058069][ T3781] bridge_slave_1: left allmulticast mode [ 118.063782][ T3781] bridge_slave_1: left promiscuous mode [ 118.069518][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.088453][ T3781] bridge_slave_0: left allmulticast mode [ 118.094186][ T3781] bridge_slave_0: left promiscuous mode [ 118.099933][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.121464][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 118.178135][T11488] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 118.184720][T11488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.192170][T11488] vhci_hcd vhci_hcd.0: Device attached [ 118.203064][T11489] vhci_hcd: connection closed [ 118.203210][ T3770] vhci_hcd: stop threads [ 118.212326][ T3770] vhci_hcd: release socket [ 118.216755][ T3770] vhci_hcd: disconnect device [ 118.223350][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.232822][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.241981][ T3781] bond0 (unregistering): Released all slaves [ 118.292109][T11461] lo speed is unknown, defaulting to 1000 [ 118.355053][ T3781] hsr_slave_0: left promiscuous mode [ 118.363352][ T3781] hsr_slave_1: left promiscuous mode [ 118.369434][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.377267][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.490094][T11461] chnl_net:caif_netlink_parms(): no params data found [ 118.550872][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.558011][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.565611][T11461] bridge_slave_0: entered allmulticast mode [ 118.573538][T11461] bridge_slave_0: entered promiscuous mode [ 118.580527][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.587594][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.594819][T11461] bridge_slave_1: entered allmulticast mode [ 118.603164][T11461] bridge_slave_1: entered promiscuous mode [ 118.632599][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.642880][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.642997][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 118.667111][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 118.681686][T11461] team0: Port device team_slave_0 added [ 118.699109][T11461] team0: Port device team_slave_1 added [ 118.732476][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.739503][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.765521][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.780582][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.787541][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.813571][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.826565][ T3781] IPVS: stop unused estimator thread 0... [ 118.917691][T11461] hsr_slave_0: entered promiscuous mode [ 118.924565][T11461] hsr_slave_1: entered promiscuous mode [ 118.932740][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 118.938658][T11461] Cannot create hsr debugfs directory [ 118.974426][T11546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=11546 comm=syz.0.3463 [ 119.083067][T11557] netlink: 'syz.6.3468': attribute type 3 has an invalid length. [ 119.199321][T11554] lo speed is unknown, defaulting to 1000 [ 119.260639][T11554] chnl_net:caif_netlink_parms(): no params data found [ 119.303580][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.310758][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.319684][T11554] bridge_slave_0: entered allmulticast mode [ 119.326105][T11554] bridge_slave_0: entered promiscuous mode [ 119.334189][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.341351][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.349756][T11554] bridge_slave_1: entered allmulticast mode [ 119.356206][T11554] bridge_slave_1: entered promiscuous mode [ 119.381501][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.391852][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.415396][T11554] team0: Port device team_slave_0 added [ 119.422495][T11554] team0: Port device team_slave_1 added [ 119.439066][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 119.439080][ T29] audit: type=1326 audit(1755154476.134:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.490383][ T29] audit: type=1326 audit(1755154476.154:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.490979][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.514013][ T29] audit: type=1326 audit(1755154476.154:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.514121][ T29] audit: type=1326 audit(1755154476.154:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.521082][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.521136][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.544432][ T29] audit: type=1326 audit(1755154476.154:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.627763][ T29] audit: type=1326 audit(1755154476.154:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.651252][ T29] audit: type=1326 audit(1755154476.154:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.674839][ T29] audit: type=1326 audit(1755154476.154:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.682220][T11579] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3474'. [ 119.698223][ T29] audit: type=1326 audit(1755154476.154:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.730607][ T29] audit: type=1326 audit(1755154476.154:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11574 comm="syz.6.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107f79ebe9 code=0x7ffc0000 [ 119.761171][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.768154][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.794097][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.807549][T11579] hsr_slave_0: left promiscuous mode [ 119.814414][T11579] hsr_slave_1: left promiscuous mode [ 119.825447][T11461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.836837][T11461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.857768][T11461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.878277][T11461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.901732][T11554] hsr_slave_0: entered promiscuous mode [ 119.907851][T11554] hsr_slave_1: entered promiscuous mode [ 119.915058][T11554] debugfs: 'hsr0' already exists in 'hsr' [ 119.920843][T11554] Cannot create hsr debugfs directory [ 120.035773][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.043649][T11577] lo speed is unknown, defaulting to 1000 [ 120.050223][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.065744][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.072813][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.087934][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.095049][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.158832][T11577] chnl_net:caif_netlink_parms(): no params data found [ 120.205316][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.212600][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.219814][T11577] bridge_slave_0: entered allmulticast mode [ 120.226190][T11577] bridge_slave_0: entered promiscuous mode [ 120.232963][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.240047][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.247330][T11577] bridge_slave_1: entered allmulticast mode [ 120.253776][T11577] bridge_slave_1: entered promiscuous mode [ 120.271113][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.282461][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.303578][T11577] team0: Port device team_slave_0 added [ 120.314391][T11461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.323235][T11577] team0: Port device team_slave_1 added [ 120.344669][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.351670][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.377605][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.391908][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.398971][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.424948][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.447785][T11554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.477024][T11577] hsr_slave_0: entered promiscuous mode [ 120.489243][T11577] hsr_slave_1: entered promiscuous mode [ 120.495039][T11577] debugfs: 'hsr0' already exists in 'hsr' [ 120.500815][T11577] Cannot create hsr debugfs directory [ 120.506686][T11554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.524779][T11554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.546371][T11554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.594954][T11461] veth0_vlan: entered promiscuous mode [ 120.624956][T11461] veth1_vlan: entered promiscuous mode [ 120.649439][T11461] veth0_macvtap: entered promiscuous mode [ 120.657928][T11461] veth1_macvtap: entered promiscuous mode [ 120.672557][T11461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.684017][T11461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.700118][ T3789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.717579][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.733510][ T3789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.749335][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.764696][ T3770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.862818][ T3770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.874314][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.881416][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.916913][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.924101][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.961207][T11577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.972837][T11577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.984431][T11577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.994818][T11577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.026798][T11554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.037297][T11554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.124534][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.139145][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.161233][ T3770] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.171785][ T3770] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.198300][T11577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.208786][T11577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.240455][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.248441][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.255546][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.282092][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.289230][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.434814][ T3770] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.445229][ T3770] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.513910][ T3770] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.524441][ T3770] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.555965][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.603722][ T3770] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.614123][ T3770] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.743810][T11659] lo speed is unknown, defaulting to 1000 [ 121.752315][ T3770] bridge_slave_1: left allmulticast mode [ 121.757967][ T3770] bridge_slave_1: left promiscuous mode [ 121.763734][ T3770] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.780150][ T3770] bridge_slave_0: left allmulticast mode [ 121.785840][ T3770] bridge_slave_0: left promiscuous mode [ 121.791614][ T3770] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.900758][ T3770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.911289][ T3770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.921197][ T3770] bond0 (unregistering): Released all slaves [ 121.934258][T11554] veth0_vlan: entered promiscuous mode [ 121.940245][T11577] veth0_vlan: entered promiscuous mode [ 121.959996][T11554] veth1_vlan: entered promiscuous mode [ 121.973520][T11577] veth1_vlan: entered promiscuous mode [ 122.001183][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3495'. [ 122.014100][T11704] netem: change failed [ 122.025776][T11706] blktrace: Concurrent blktraces are not allowed on loop2 [ 122.044562][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.052122][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.062240][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.069779][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.081330][ T3770] veth0_macvtap: left promiscuous mode [ 122.086861][ T3770] veth1_vlan: left promiscuous mode [ 122.092247][ T3770] veth0_vlan: left promiscuous mode [ 122.152289][ T3770] team0 (unregistering): Port device team_slave_1 removed [ 122.163879][ T3770] team0 (unregistering): Port device team_slave_0 removed [ 122.198182][T11577] veth0_macvtap: entered promiscuous mode [ 122.247962][T11577] veth1_macvtap: entered promiscuous mode [ 122.255528][T11554] veth0_macvtap: entered promiscuous mode [ 122.265460][T11554] veth1_macvtap: entered promiscuous mode [ 122.293677][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.306039][T11659] chnl_net:caif_netlink_parms(): no params data found [ 122.318150][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.328777][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.329275][T11724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3500'. [ 122.352520][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.370166][ T3781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.390951][ T3781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.453027][ T3781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.472545][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.479736][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.495328][T11659] bridge_slave_0: entered allmulticast mode [ 122.512386][T11659] bridge_slave_0: entered promiscuous mode [ 122.520389][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.527472][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.535436][T11659] bridge_slave_1: entered allmulticast mode [ 122.538047][T11742] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 122.543107][T11659] bridge_slave_1: entered promiscuous mode [ 122.580361][ T3781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.595532][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.604935][ T3781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.615668][ T3781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.643915][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.659055][ T3781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.668007][ T3781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.709005][T11659] team0: Port device team_slave_0 added [ 122.721934][T11659] team0: Port device team_slave_1 added [ 122.774936][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.782025][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.808065][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.830942][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.837977][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.863914][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.951025][T11659] hsr_slave_0: entered promiscuous mode [ 122.962655][T11659] hsr_slave_1: entered promiscuous mode [ 122.973074][T11659] debugfs: 'hsr0' already exists in 'hsr' [ 122.978910][T11659] Cannot create hsr debugfs directory [ 123.062985][T11793] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3529'. [ 123.187093][T11816] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.286228][T11659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.295435][T11659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.308146][T11659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.317727][T11659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.366566][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.388052][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.404566][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.411729][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.429287][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.436352][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.529975][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.684250][T11659] veth0_vlan: entered promiscuous mode [ 123.708584][T11895] pim6reg: entered allmulticast mode [ 123.718324][T11895] pim6reg: left allmulticast mode [ 123.737877][T11659] veth1_vlan: entered promiscuous mode [ 123.757160][T11659] veth0_macvtap: entered promiscuous mode [ 123.764519][T11659] veth1_macvtap: entered promiscuous mode [ 123.776848][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.789736][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.802124][ T3755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.824726][ T3781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.846637][ T3781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857345][ T3781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.945356][T11923] loop6: detected capacity change from 0 to 512 [ 123.952518][T11923] EXT4-fs: Ignoring removed i_version option [ 123.961675][T11921] team0 (unregistering): Port device team_slave_0 removed [ 123.972599][T11921] team0 (unregistering): Port device team_slave_1 removed [ 123.998802][T11923] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 124.011798][T11923] System zones: 0-2, 18-18, 34-35 [ 124.019599][T11923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.056347][T11923] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.062842][T11938] syzkaller0: entered promiscuous mode [ 124.072181][T11938] syzkaller0: entered allmulticast mode [ 124.083800][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.093459][ T1030] rtc_cmos 00:00: Alarms can be up to one day in the future [ 124.101189][ T1030] rtc_cmos 00:00: Alarms can be up to one day in the future [ 124.108868][ T1030] rtc_cmos 00:00: Alarms can be up to one day in the future [ 124.116495][ T1030] rtc_cmos 00:00: Alarms can be up to one day in the future [ 124.123833][ T1030] rtc rtc0: __rtc_set_alarm: err=-22 [ 124.134011][T11938] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 124.289841][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3599'. [ 124.302579][ T3740] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.302660][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3599'. [ 124.313206][ T3740] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.329585][ T3740] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.338990][ T3740] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.452638][T11988] serio: Serial port ptm0 [ 124.510193][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 124.510207][ T29] audit: type=1326 audit(1755154481.204:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.540474][ T29] audit: type=1326 audit(1755154481.204:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.563980][ T29] audit: type=1326 audit(1755154481.204:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.587553][ T29] audit: type=1326 audit(1755154481.204:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.611217][ T29] audit: type=1326 audit(1755154481.204:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.635109][ T29] audit: type=1326 audit(1755154481.204:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.658713][ T29] audit: type=1326 audit(1755154481.204:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.726850][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 124.732106][ T29] audit: type=1326 audit(1755154481.264:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.741471][T11997] vlan2: entered allmulticast mode [ 124.759368][ T29] audit: type=1326 audit(1755154481.264:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.764471][T11997] syz_tun: entered allmulticast mode [ 124.793422][ T29] audit: type=1326 audit(1755154481.384:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11991 comm="syz.1.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 124.915753][T12008] $H: renamed from bond0 (while UP) [ 124.928066][T12008] $H: entered promiscuous mode [ 124.933206][T12008] bond_slave_0: entered promiscuous mode [ 124.939030][T12008] bond_slave_1: entered promiscuous mode [ 125.022295][T12015] loop3: detected capacity change from 0 to 2048 [ 125.082380][T12015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.406733][T12064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3640'. [ 125.456426][T12066] loop6: detected capacity change from 0 to 128 [ 125.476057][T12066] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.489396][T12066] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.557197][T11659] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.839995][T12091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12091 comm=syz.1.3651 [ 125.858527][ T3776] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.898687][ T3776] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 125.911435][ T3776] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.911435][ T3776] [ 125.921196][ T3776] EXT4-fs (loop3): Total free blocks count 0 [ 125.927421][ T3776] EXT4-fs (loop3): Free/Dirty block details [ 125.933675][ T3776] EXT4-fs (loop3): free_blocks=2415919104 [ 125.939500][ T3776] EXT4-fs (loop3): dirty_blocks=8208 [ 125.944908][ T3776] EXT4-fs (loop3): Block reservation details [ 125.950948][ T3776] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 125.952319][T12102] loop6: detected capacity change from 0 to 1024 [ 125.968819][T12102] EXT4-fs: Ignoring removed oldalloc option [ 125.980641][ T3781] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 125.994847][T12102] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 126.022712][T12102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.187314][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.203539][T12115] netlink: 468 bytes leftover after parsing attributes in process `syz.3.3653'. [ 126.276380][T12123] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.287086][T12123] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.332503][T12131] rdma_op ffff88811875b580 conn xmit_rdma 0000000000000000 [ 126.410525][T12149] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3679'. [ 126.449380][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.456836][T12155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.469259][T12158] loop3: detected capacity change from 0 to 1024 [ 126.476034][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.483478][T12155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.500176][T12158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.516384][T12158] ext4 filesystem being mounted at /759/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.530856][T12158] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3684: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.545362][T12158] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.557894][T12158] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.557894][T12158] [ 126.577829][ T3776] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:45: lblock 8 mapped to illegal pblock 8 (length 8) [ 126.592831][ T3776] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 126.605511][ T3776] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.605511][ T3776] [ 126.620972][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.649904][T12172] loop3: detected capacity change from 0 to 512 [ 126.658109][T12172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.951679][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.181087][T12221] netlink: 566 bytes leftover after parsing attributes in process `syz.3.3711'. [ 127.331973][T12235] lo speed is unknown, defaulting to 1000 [ 127.388384][T12246] loop3: detected capacity change from 0 to 512 [ 127.407952][T12246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.452545][T12246] ext4 filesystem being mounted at /774/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.472289][T12246] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3723: bg 0: block 289: padding at end of block bitmap is not set [ 127.550467][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.596289][T12258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12258 comm=syz.5.3728 [ 127.683007][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'. [ 127.692848][T12272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3734'. [ 127.753998][T12123] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.764387][T12123] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.901800][T12123] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.912293][T12123] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.030863][T12123] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.041257][T12123] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.125230][ T3781] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.133595][ T3781] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.183421][ T3781] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.191739][ T3781] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.237354][ T3781] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.245609][ T3781] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.286838][ T3781] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.295110][ T3781] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.564586][ T3382] hid_parser_main: 17 callbacks suppressed [ 128.564608][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 128.578286][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 128.586176][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.593870][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.601621][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.609307][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.616953][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.624727][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.632420][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.640253][ T3382] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 128.659183][ T3382] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 128.875595][T12337] blktrace: Concurrent blktraces are not allowed on loop2 [ 128.924496][T12341] loop3: detected capacity change from 0 to 128 [ 128.934545][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.943020][T12341] FAT-fs (loop3): Filesystem has been set read-only [ 128.951655][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.961608][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.970892][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.979526][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.988190][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 128.996863][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 129.007277][T12341] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 129.267649][T12379] loop5: detected capacity change from 0 to 512 [ 129.282399][T12379] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.299177][T12379] EXT4-fs (loop5): mount failed [ 129.571326][T12426] loop6: detected capacity change from 0 to 128 [ 129.584988][T12426] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.600125][T12426] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.681106][T11659] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.700655][T12433] loop6: detected capacity change from 0 to 512 [ 129.711452][T12433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.724522][T12433] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.736931][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3807'. [ 129.809672][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.921458][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3820'. [ 129.932067][T12446] netem: change failed [ 130.110940][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 130.110957][ T29] audit: type=1326 audit(1755154486.804:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 130.140738][ T29] audit: type=1326 audit(1755154486.804:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 130.165238][ T29] audit: type=1326 audit(1755154486.854:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 130.188697][ T29] audit: type=1326 audit(1755154486.854:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 130.212278][ T29] audit: type=1326 audit(1755154486.854:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 130.321904][ T29] audit: type=1326 audit(1755154487.004:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 130.345464][ T29] audit: type=1326 audit(1755154487.004:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 130.345494][ T29] audit: type=1326 audit(1755154487.004:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 130.392432][ T29] audit: type=1326 audit(1755154487.004:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 130.415918][ T29] audit: type=1326 audit(1755154487.004:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 130.455341][T12467] lo speed is unknown, defaulting to 1000 [ 131.126387][T12508] loop5: detected capacity change from 0 to 128 [ 131.134519][T12508] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.147670][T12508] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.231398][T11554] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.304744][T12520] netlink: 'syz.5.3845': attribute type 1 has an invalid length. [ 131.774441][T12560] ipip0: entered promiscuous mode [ 132.089965][ T3740] bridge_slave_1: left allmulticast mode [ 132.095643][ T3740] bridge_slave_1: left promiscuous mode [ 132.101389][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.148953][ T3740] bridge_slave_0: left promiscuous mode [ 132.154662][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.261631][ T3740] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.271848][ T3740] bond_slave_0: left promiscuous mode [ 132.289038][ T3740] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.300663][ T3740] bond_slave_1: left promiscuous mode [ 132.306325][ T3740] $H (unregistering): Released all slaves [ 132.409447][ T3740] hsr_slave_0: left promiscuous mode [ 132.416493][ T3740] hsr_slave_1: left promiscuous mode [ 132.423253][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.443206][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.527514][ T3740] team0 (unregistering): Port device team_slave_1 removed [ 132.572106][ T3740] team0 (unregistering): Port device team_slave_0 removed [ 132.648403][T12587] lo speed is unknown, defaulting to 1000 [ 132.678538][ T3755] smc: removing ib device syz! [ 132.784276][T12587] chnl_net:caif_netlink_parms(): no params data found [ 132.898738][T12639] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 132.967260][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.974510][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.000766][T12587] bridge_slave_0: entered allmulticast mode [ 133.007294][T12587] bridge_slave_0: entered promiscuous mode [ 133.014505][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.021692][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.032085][T12587] bridge_slave_1: entered allmulticast mode [ 133.039793][T12587] bridge_slave_1: entered promiscuous mode [ 133.063550][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.073310][ T3740] IPVS: stop unused estimator thread 0... [ 133.080398][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.111108][T12587] team0: Port device team_slave_0 added [ 133.117698][T12587] team0: Port device team_slave_1 added [ 133.135858][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.142937][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.168939][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.182949][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.189992][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.216083][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.245386][T12587] hsr_slave_0: entered promiscuous mode [ 133.252913][T12587] hsr_slave_1: entered promiscuous mode [ 133.258862][T12587] debugfs: 'hsr0' already exists in 'hsr' [ 133.264579][T12587] Cannot create hsr debugfs directory [ 133.341068][T12587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 133.351213][T12587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 133.360037][T12587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 133.369828][T12587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 133.396155][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.403232][T12587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.410525][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.417639][T12587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.454401][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.466802][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.480559][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.498119][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.508668][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.515867][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.532097][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.539245][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.607896][T12587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.734205][T12587] veth0_vlan: entered promiscuous mode [ 133.742148][T12587] veth1_vlan: entered promiscuous mode [ 133.757287][T12587] veth0_macvtap: entered promiscuous mode [ 133.764949][T12587] veth1_macvtap: entered promiscuous mode [ 133.776990][T12587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.788047][T12587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.799376][ T3755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.808795][ T3755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.817736][ T3755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.833925][ T3755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.978699][T12691] pim6reg: entered allmulticast mode [ 133.985795][T12691] pim6reg: left allmulticast mode [ 134.111927][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 134.125553][ T3764] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.136060][ T3764] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.145382][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 134.157479][ T3764] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.168758][ T3764] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.256991][T12713] loop7: detected capacity change from 0 to 512 [ 134.263820][T12713] EXT4-fs: Ignoring removed i_version option [ 134.290636][T12713] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 134.308800][T12713] System zones: 0-2, 18-18, 34-35 [ 134.321281][T12713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.334331][T12713] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.365754][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.469940][T12742] pimreg: entered allmulticast mode [ 134.476926][T12742] pimreg: left allmulticast mode [ 134.529948][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 134.543815][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 134.545091][ T3755] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.579941][T12748] team0 (unregistering): Port device team_slave_0 removed [ 134.591037][T12748] team0 (unregistering): Port device team_slave_1 removed [ 134.607093][ T3755] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.617089][ T3755] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.635799][ T3755] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.687111][T12758] bridge0: entered promiscuous mode [ 134.692578][T12758] macsec1: entered promiscuous mode [ 134.699532][T12758] bridge0: port 3(macsec1) entered blocking state [ 134.706000][T12758] bridge0: port 3(macsec1) entered disabled state [ 134.712926][T12758] macsec1: entered allmulticast mode [ 134.718293][T12758] bridge0: entered allmulticast mode [ 134.725423][T12758] macsec1: left allmulticast mode [ 134.730515][T12758] bridge0: left allmulticast mode [ 134.738353][T12758] bridge0: left promiscuous mode [ 134.914843][T12778] pim6reg: entered allmulticast mode [ 134.936394][T12778] pim6reg: left allmulticast mode [ 134.963672][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 134.975998][T12784] vlan2: entered allmulticast mode [ 134.981172][T12784] syz_tun: entered allmulticast mode [ 135.082174][T12782] loop7: detected capacity change from 0 to 8192 [ 135.150227][T12792] loop6: detected capacity change from 0 to 1024 [ 135.170722][T12792] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 135.181270][T12792] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.200681][T12792] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #32: comm syz.6.3952: iget: special inode unallocated [ 135.223765][T12792] EXT4-fs (loop6): Remounting filesystem read-only [ 135.230388][T12792] EXT4-fs (loop6): no journal found [ 135.235602][T12792] EXT4-fs (loop6): can't get journal size [ 135.241552][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 135.241569][ T29] audit: type=1326 audit(1755154491.934:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 135.271239][ T29] audit: type=1326 audit(1755154491.934:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 135.294903][ T29] audit: type=1326 audit(1755154491.934:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 135.318375][ T29] audit: type=1326 audit(1755154491.934:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 135.341887][ T29] audit: type=1326 audit(1755154491.934:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 135.418650][T12792] EXT4-fs (loop6): filesystem is read-only [ 135.424750][T12792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.537508][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.561609][T12806] macvlan1: entered promiscuous mode [ 135.578182][T12806] ipvlan0: entered promiscuous mode [ 135.584362][T12806] ipvlan0: left promiscuous mode [ 135.591638][T12806] macvlan1: left promiscuous mode [ 135.680069][T12817] $H: renamed from bond0 (while UP) [ 135.687352][T12817] $H: entered promiscuous mode [ 135.692500][T12817] bond_slave_0: entered promiscuous mode [ 135.698295][T12817] bond_slave_1: entered promiscuous mode [ 135.761181][T12825] bridge0: entered promiscuous mode [ 135.766431][T12825] macsec1: entered promiscuous mode [ 135.789898][ T29] audit: type=1326 audit(1755154492.474:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.1.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 135.813591][ T29] audit: type=1326 audit(1755154492.474:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.1.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 135.837096][ T29] audit: type=1326 audit(1755154492.474:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.1.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 135.860607][ T29] audit: type=1326 audit(1755154492.474:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.1.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7a28ebe9 code=0x7ffc0000 [ 135.884133][ T29] audit: type=1326 audit(1755154492.474:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.1.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e7a2c14a5 code=0x7ffc0000 [ 135.915989][T12830] loop7: detected capacity change from 0 to 128 [ 135.922706][T12825] bridge0: left promiscuous mode [ 135.937963][T12830] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.969999][T12830] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.022625][T12587] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.072008][T12839] loop7: detected capacity change from 0 to 1024 [ 136.091547][T12839] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 136.111506][T12839] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.129337][T12839] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #32: comm syz.7.3969: iget: special inode unallocated [ 136.164368][T12839] EXT4-fs (loop7): Remounting filesystem read-only [ 136.171002][T12839] EXT4-fs (loop7): no journal found [ 136.176219][T12839] EXT4-fs (loop7): can't get journal size [ 136.203158][T12839] EXT4-fs (loop7): filesystem is read-only [ 136.216358][T12839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.260188][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.276553][T12850] netlink: 468 bytes leftover after parsing attributes in process `syz.6.3986'. [ 136.406793][T12867] bridge0: entered promiscuous mode [ 136.413557][T12867] macsec1: entered promiscuous mode [ 136.420454][T12867] bridge0: left promiscuous mode [ 136.568753][T12892] loop7: detected capacity change from 0 to 512 [ 136.624464][T12895] bridge0: entered promiscuous mode [ 136.631069][T12895] macsec1: entered promiscuous mode [ 136.632979][T12892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.658703][T12895] bridge0: port 3(macsec1) entered blocking state [ 136.665253][T12895] bridge0: port 3(macsec1) entered disabled state [ 136.680234][T12892] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.692226][T12895] macsec1: entered allmulticast mode [ 136.697601][T12895] bridge0: entered allmulticast mode [ 136.730347][T12895] macsec1: left allmulticast mode [ 136.735499][T12895] bridge0: left allmulticast mode [ 136.751119][T12895] bridge0: left promiscuous mode [ 136.875507][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.911744][T12905] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3998'. [ 136.943738][T12913] block device autoloading is deprecated and will be removed. [ 137.061338][T12919] bridge0: entered promiscuous mode [ 137.088658][T12919] macsec1: entered promiscuous mode [ 137.108738][T12919] bridge0: left promiscuous mode [ 137.238762][T12941] rdma_op ffff888105998d80 conn xmit_rdma 0000000000000000 [ 137.545441][T12955] block device autoloading is deprecated and will be removed. [ 137.646700][T12963] loop7: detected capacity change from 0 to 1024 [ 137.694909][T12963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.723547][T12963] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.748253][T12963] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.4024: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.780174][T12963] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 137.792484][T12963] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.792484][T12963] [ 137.840935][ T3776] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:45: lblock 8 mapped to illegal pblock 8 (length 8) [ 137.902825][ T3776] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 137.915171][ T3776] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.915171][ T3776] [ 137.961068][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.112763][T12991] loop7: detected capacity change from 0 to 1024 [ 138.131144][T12991] EXT4-fs: Ignoring removed oldalloc option [ 138.145287][T12991] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 138.146941][T12993] netlink: 'syz.0.4035': attribute type 39 has an invalid length. [ 138.197118][T12991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.271925][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.291058][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.350943][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.486090][T13016] loop6: detected capacity change from 0 to 512 [ 138.500333][T13016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.512925][T13016] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.523872][T13013] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.531685][T13013] vhci_hcd: invalid port number 118 [ 138.536916][T13013] vhci_hcd: default hub control req: 2317 v0008 i0076 l0 [ 138.592142][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.821805][T13034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13034 comm=syz.7.4053 [ 138.834474][T13035] loop0: detected capacity change from 0 to 1024 [ 138.842424][T13035] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.849129][T13035] EXT4-fs: Ignoring removed bh option [ 138.871228][T13035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.942564][T11577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.179465][T13052] lo speed is unknown, defaulting to 1000 [ 139.354893][T13060] loop0: detected capacity change from 0 to 512 [ 139.362663][T13060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.383570][T13060] EXT4-fs (loop0): 1 truncate cleaned up [ 139.391933][T13060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.454430][T11577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.641429][T13079] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4070'. [ 139.815141][T13096] loop6: detected capacity change from 0 to 1024 [ 139.816943][T13094] lo speed is unknown, defaulting to 1000 [ 139.850476][T13096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.872738][T13096] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.900350][T13096] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.4077: lblock 3 mapped to illegal pblock 3 (length 3) [ 139.917301][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4080'. [ 139.946112][T13096] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 139.958415][T13096] EXT4-fs (loop6): This should not happen!! Data will be lost [ 139.958415][T13096] [ 139.974570][T13110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.985311][ T3764] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:33: lblock 8 mapped to illegal pblock 8 (length 8) [ 140.016100][ T3764] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 140.028403][ T3764] EXT4-fs (loop6): This should not happen!! Data will be lost [ 140.028403][ T3764] [ 140.039175][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.061265][T13110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.127060][T13123] loop6: detected capacity change from 0 to 8192 [ 140.141830][T13110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.195634][T13132] lo speed is unknown, defaulting to 1000 [ 140.204936][T13135] loop6: detected capacity change from 0 to 128 [ 140.239462][T13110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.306077][ T3776] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.327162][ T3776] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.335614][ T3776] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.350300][ T3776] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.394315][T13148] loop0: detected capacity change from 0 to 512 [ 140.412336][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 140.412351][ T29] audit: type=1400 audit(1755154497.104:4392): avc: denied { unmount } for pid=13149 comm="syz.7.4100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.412949][T13148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.418547][ T8016] Process accounting resumed [ 140.449893][T13148] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.565595][T13156] loop7: detected capacity change from 0 to 1024 [ 140.601614][T13156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.643019][T11577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.645243][T13156] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4101: Allocating blocks 497-513 which overlap fs metadata [ 140.678409][T13156] EXT4-fs (loop7): pa ffff888106dbc690: logic 256, phys. 369, len 9 [ 140.686711][T13156] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 140.697452][T13156] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 140.725702][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 140.741380][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.795289][T13163] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4103'. [ 140.833468][ T29] audit: type=1326 audit(1755154497.524:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e7a22add9 code=0x7fc00000 [ 140.889515][T13168] pimreg: entered allmulticast mode [ 140.904893][T13168] pimreg: left allmulticast mode [ 140.930165][T13166] loop7: detected capacity change from 0 to 8192 [ 141.128898][T13183] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.175678][T13188] lo speed is unknown, defaulting to 1000 [ 141.205953][T13183] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.248118][T13183] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.321318][T13183] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.374178][ T3740] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.389531][ T3792] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.408063][ T3792] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.416853][ T3792] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.662646][ T29] audit: type=1326 audit(1755154498.354:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7fc00000 [ 141.693101][ T29] audit: type=1326 audit(1755154498.384:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7fc00000 [ 142.282742][ T29] audit: type=1326 audit(1755154498.974:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe00519add9 code=0x7fc00000 [ 142.306260][ T29] audit: type=1326 audit(1755154498.974:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe00519ae9f code=0x7fc00000 [ 142.329794][ T29] audit: type=1326 audit(1755154498.974:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0051febe9 code=0x7fc00000 [ 142.383736][ T29] audit: type=1326 audit(1755154499.074:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.6.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 142.407321][ T29] audit: type=1326 audit(1755154499.074:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.6.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 142.432633][ T29] audit: type=1326 audit(1755154499.104:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.6.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0051febe9 code=0x7ffc0000 [ 142.466131][T13226] loop7: detected capacity change from 0 to 512 [ 142.480524][T13226] EXT4-fs: Ignoring removed orlov option [ 142.500740][T13226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.513471][T13226] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.552247][T13240] lo speed is unknown, defaulting to 1000 [ 142.580764][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.641514][T13246] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.651968][T13246] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.693204][T13246] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.703654][T13246] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.762961][T13255] loop6: detected capacity change from 0 to 2048 [ 142.770970][T13246] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.781381][T13246] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.801598][T13255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.818516][T13255] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.842217][T13246] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.852568][T13246] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.888309][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.902477][T13258] lo speed is unknown, defaulting to 1000 [ 142.961017][ T3776] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.969419][ T3776] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.004043][ T3776] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.012364][ T3776] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.048619][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4143'. [ 143.059865][ T3776] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.068049][ T3776] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.096549][ T3776] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.104806][ T3776] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.218049][T13279] loop6: detected capacity change from 0 to 512 [ 143.241755][T13279] EXT4-fs (loop6): too many log groups per flexible block group [ 143.249598][T13279] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 143.269727][T13279] EXT4-fs (loop6): mount failed [ 143.321978][T13291] pim6reg1: entered promiscuous mode [ 143.327313][T13291] pim6reg1: entered allmulticast mode [ 143.417220][T13300] loop7: detected capacity change from 0 to 512 [ 143.423851][T13300] EXT4-fs: Ignoring removed nobh option [ 143.429557][T13300] EXT4-fs: Ignoring removed oldalloc option [ 143.435949][T13300] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 143.445928][T13300] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 144.067512][T13306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.077846][T13306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.122437][T13306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.132841][T13306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.143290][ T8036] IPVS: starting estimator thread 0... [ 144.152206][T13316] lo speed is unknown, defaulting to 1000 [ 144.158352][T13322] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4164'. [ 144.203386][T13306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.213788][T13306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.238920][T13320] IPVS: using max 2784 ests per chain, 139200 per kthread [ 144.271886][T13306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.282278][T13306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.335729][ T3764] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.344055][ T3764] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.363088][ T3764] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.371370][ T3764] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.382866][ T3755] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.391217][ T3755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.402387][ T3755] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.410599][ T3755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.991568][T13350] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4178'. [ 145.010869][T13348] lo speed is unknown, defaulting to 1000 [ 145.031109][T13353] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.041007][T13353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.080629][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4182'. [ 145.099712][T13353] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.109571][T13353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.159246][T13367] loop6: detected capacity change from 0 to 1024 [ 145.169492][T13353] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.179317][T13353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.182688][T13367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.203132][T13367] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.269878][T11659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.280996][T13353] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.290907][T13353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.333750][T13374] loop0: detected capacity change from 0 to 4096 [ 145.362012][T13374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.394143][T11577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.558207][T13385] loop0: detected capacity change from 0 to 4096 [ 145.576702][T13385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.591934][T13385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.627629][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 145.627644][ T29] audit: type=1326 audit(1755154502.314:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.677240][ T29] audit: type=1326 audit(1755154502.354:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.701065][ T29] audit: type=1326 audit(1755154502.354:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.724640][ T29] audit: type=1326 audit(1755154502.354:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.748167][ T29] audit: type=1326 audit(1755154502.354:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.771641][ T29] audit: type=1326 audit(1755154502.354:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.795242][ T29] audit: type=1326 audit(1755154502.354:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.818812][ T29] audit: type=1326 audit(1755154502.354:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.842418][ T29] audit: type=1326 audit(1755154502.354:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.865993][ T29] audit: type=1326 audit(1755154502.354:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8090ddebe9 code=0x7ffc0000 [ 145.975915][T13399] lo speed is unknown, defaulting to 1000 [ 146.091019][T13408] vlan2: entered allmulticast mode [ 146.258182][T13421] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.395332][T13421] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.437869][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4216'. [ 146.447424][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4216'. [ 146.460037][T13421] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.483685][T13442] lo speed is unknown, defaulting to 1000 [ 146.528117][T13451] serio: Serial port ptm0 [ 146.550079][T13421] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.615813][ T3740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.637266][ T3740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.655537][ T3740] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.668306][ T3792] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.770299][ T3396] hid_parser_main: 6 callbacks suppressed [ 146.770315][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 146.783615][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.791037][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.798492][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.805961][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.813463][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.820888][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.828398][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.835797][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.843349][ T3396] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.852480][ T3396] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 146.896190][T13485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13485 comm=syz.5.4237 [ 146.908816][T13485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13485 comm=syz.5.4237 [ 147.003507][T13486] lo speed is unknown, defaulting to 1000 [ 147.048610][T13501] Falling back ldisc for ttyS3. [ 147.065473][T13486] chnl_net:caif_netlink_parms(): no params data found [ 147.113061][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.120300][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.127523][T13486] bridge_slave_0: entered allmulticast mode [ 147.134418][T13486] bridge_slave_0: entered promiscuous mode [ 147.141594][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.148764][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.156096][T13486] bridge_slave_1: entered allmulticast mode [ 147.162629][T13486] bridge_slave_1: entered promiscuous mode [ 147.181693][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.192562][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.213305][T13486] team0: Port device team_slave_0 added [ 147.220302][T13486] team0: Port device team_slave_1 added [ 147.240342][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.247302][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.273320][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.295361][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.302444][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.328414][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.355416][T13486] hsr_slave_0: entered promiscuous mode [ 147.361537][T13486] hsr_slave_1: entered promiscuous mode [ 147.367518][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 147.373277][T13486] Cannot create hsr debugfs directory [ 147.385680][T13524] netlink: 'syz.5.4250': attribute type 1 has an invalid length. [ 147.404074][T13524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.419941][T13524] bond1: (slave gretap1): making interface the new active one [ 147.428159][T13524] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 147.524453][T13486] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.533140][T13486] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 147.541958][T13486] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 147.561281][T13486] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 147.598982][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.616708][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.627355][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.634447][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.635613][T13548] loop7: detected capacity change from 0 to 512 [ 147.651825][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.658979][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.667103][T13548] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 147.680170][T13548] EXT4-fs (loop7): 1 truncate cleaned up [ 147.686401][T13548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.708957][T13548] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 147.708957][T13548] program syz.7.4258 not setting count and/or reply_len properly [ 147.742156][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.785010][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.902913][T13571] loop7: detected capacity change from 0 to 128 [ 147.914515][T13571] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.928685][T13571] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.954213][T12587] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.049102][T13486] veth0_vlan: entered promiscuous mode [ 148.072981][T13486] veth1_vlan: entered promiscuous mode [ 148.104640][ T3755] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.112939][ T3755] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.136617][ T3755] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.144945][ T3755] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.163616][T13486] veth0_macvtap: entered promiscuous mode [ 148.182750][T13486] veth1_macvtap: entered promiscuous mode [ 148.194962][ T3755] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.203236][ T3755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.212220][ T3755] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.220457][ T3755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.252416][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.272050][T13598] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4272'. [ 148.282729][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.303358][ T3764] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.347691][ T3764] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.358884][ T3764] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.380245][ T3764] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.422954][T13615] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.460688][T13621] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.488029][T13628] loop7: detected capacity change from 0 to 2048 [ 148.520170][T13628] loop7: p1 < > p4 [ 148.525319][T13628] loop7: p4 size 8388608 extends beyond EOD, truncated [ 148.525883][T13621] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.577899][T13640] vlan3: entered allmulticast mode [ 148.591193][T13621] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.639275][T13642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13642 comm=syz.1.4291 [ 148.651921][T13642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13642 comm=syz.1.4291 [ 148.667870][T13621] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.697352][T13646] netlink: 'syz.1.4293': attribute type 7 has an invalid length. [ 148.705220][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 148.752444][T13629] loop0: detected capacity change from 0 to 8192 [ 148.782857][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4298'. [ 148.792430][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4298'. [ 149.048932][T13676] usb usb4: usbfs: interface 0 claimed by hub while 'syz.7.4307' sets config #0 [ 149.442865][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.450111][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.491684][T13723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.501339][T13723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.542569][ T3764] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.551226][ T3764] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.560652][ T3764] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.569239][ T3764] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.588125][ T3764] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.596567][ T3764] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.618838][ T3764] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.627257][ T3764] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.841633][T13762] tipc: Started in network mode [ 149.846591][T13762] tipc: Node identity de2f3f260fbb, cluster identity 4711 [ 149.853902][T13762] tipc: Enabled bearer , priority 0 [ 149.863743][ T3764] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.873070][T13761] tipc: Disabling bearer [ 149.889183][ T3792] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.910592][ T3792] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.924411][ T3792] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.319495][T13823] sctp: [Deprecated]: syz.7.4374 (pid 13823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.319495][T13823] Use struct sctp_sack_info instead [ 150.402205][T13835] 9pnet: p9_errstr2errno: server reported unknown error [ 150.431037][T13839] bridge0: port 3(batadv1) entered blocking state [ 150.437579][T13839] bridge0: port 3(batadv1) entered disabled state [ 150.444377][T13839] batadv1: entered allmulticast mode [ 150.450971][T13839] batadv1: entered promiscuous mode [ 150.539974][T13854] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4389'. [ 150.650104][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 150.650138][ T29] audit: type=1400 audit(1755154507.344:4745): avc: denied { bind } for pid=13871 comm="syz.7.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.676242][ T29] audit: type=1400 audit(1755154507.344:4746): avc: denied { name_bind } for pid=13871 comm="syz.7.4398" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.698278][ T29] audit: type=1400 audit(1755154507.344:4747): avc: denied { node_bind } for pid=13871 comm="syz.7.4398" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 150.733391][ T29] audit: type=1326 audit(1755154507.424:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.756997][ T29] audit: type=1326 audit(1755154507.424:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.785356][ T29] audit: type=1326 audit(1755154507.454:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.799495][T13881] netlink: 'syz.7.4401': attribute type 1 has an invalid length. [ 150.808953][ T29] audit: type=1326 audit(1755154507.454:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.840261][ T29] audit: type=1326 audit(1755154507.454:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.846555][T13881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.863950][ T29] audit: type=1326 audit(1755154507.454:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.864025][ T29] audit: type=1326 audit(1755154507.454:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13873 comm="syz.5.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb92ebe9 code=0x7ffc0000 [ 150.940355][ T3740] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 150.949672][ T3740] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 151.150757][T13918] loop8: detected capacity change from 0 to 1024 [ 151.167759][T13918] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.174608][T13918] EXT4-fs: Ignoring removed bh option [ 151.276103][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'. [ 151.276170][T13918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.388111][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.542256][T13934] loop8: detected capacity change from 0 to 1024 [ 151.574940][T13934] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.650945][T13934] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4421: bg 0: block 10: padding at end of block bitmap is not set [ 151.709620][T13934] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4421: Failed to acquire dquot type 0 [ 151.747724][T13934] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4421: Failed to acquire dquot type 0 [ 151.784658][T13934] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.4421: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.825258][T13934] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4421: Failed to acquire dquot type 0 [ 151.863409][T13934] EXT4-fs (loop8): 1 orphan inode deleted [ 151.886129][T13934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.996265][T13934] syz.8.4421 (13934) used greatest stack depth: 9072 bytes left [ 152.008446][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.485835][T13979] smc: net device bond0 applied user defined pnetid SYZ2 [ 152.506434][T13979] smc: net device bond0 erased user defined pnetid SYZ2 [ 152.560506][T13981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4436'. [ 152.585126][T13983] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4437'. [ 152.618653][T13983] 0: renamed from hsr0 (while UP) [ 152.646719][T13983] 0: entered allmulticast mode [ 152.651880][T13983] hsr_slave_0: entered allmulticast mode [ 152.657604][T13983] hsr_slave_1: entered allmulticast mode [ 152.703205][T13983] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 152.744709][T13990] loop0: detected capacity change from 0 to 1024 [ 152.791334][T13990] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.802288][T13990] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.856973][T13990] JBD2: no valid journal superblock found [ 152.862927][T13990] EXT4-fs (loop0): Could not load journal inode [ 152.985438][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4449'. [ 152.994583][T14005] netlink: 'syz.8.4449': attribute type 15 has an invalid length. [ 153.037489][ T3764] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.045840][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4449'. [ 153.054925][T14005] netlink: 'syz.8.4449': attribute type 15 has an invalid length. [ 153.072983][ T3764] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.104334][ T3764] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.160872][ T3764] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.171038][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4463'. [ 154.185123][T14038] netem: change failed [ 154.190285][T14040] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4464'. [ 154.289149][T14058] netlink: zone id is out of range [ 154.294400][T14058] netlink: zone id is out of range [ 154.299576][T14058] netlink: zone id is out of range [ 154.304730][T14058] netlink: zone id is out of range [ 154.310086][T14058] netlink: zone id is out of range [ 154.315267][T14058] netlink: zone id is out of range [ 154.320686][T14058] netlink: zone id is out of range [ 154.424190][T14079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.452102][T14083] all: renamed from bridge_slave_0 (while UP) [ 154.478947][T14087] netlink: 300 bytes leftover after parsing attributes in process `syz.7.4487'. [ 154.571079][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4492'. [ 154.632822][T14105] policy can only be matched on NF_INET_PRE_ROUTING [ 154.632836][T14105] unable to load match [ 155.258990][T14161] rdma_op ffff888114ee1580 conn xmit_rdma 0000000000000000 [ 155.691375][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 155.691392][ T29] audit: type=1400 audit(1755154513.391:4974): avc: denied { create } for pid=14201 comm="syz.5.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.735156][ T29] audit: type=1400 audit(1755154513.421:4975): avc: denied { write } for pid=14201 comm="syz.5.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.843234][ T29] audit: type=1400 audit(1755154513.541:4976): avc: denied { module_request } for pid=14213 comm="syz.5.4548" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 155.881144][ T29] audit: type=1400 audit(1755154513.571:4977): avc: denied { sys_module } for pid=14213 comm="syz.5.4548" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 155.903720][ T29] audit: type=1400 audit(1755154513.581:4978): avc: denied { bind } for pid=14218 comm="syz.7.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.923301][ T29] audit: type=1400 audit(1755154513.581:4979): avc: denied { listen } for pid=14218 comm="syz.7.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.942959][ T29] audit: type=1400 audit(1755154513.581:4980): avc: denied { accept } for pid=14218 comm="syz.7.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.962647][ T29] audit: type=1400 audit(1755154513.581:4981): avc: denied { read } for pid=14218 comm="syz.7.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.974546][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4551'. [ 156.008008][T14224] netem: change failed [ 156.047179][ T29] audit: type=1400 audit(1755154513.741:4982): avc: denied { mount } for pid=14229 comm="syz.0.4554" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 156.097484][ T29] audit: type=1400 audit(1755154513.791:4983): avc: denied { mounton } for pid=14235 comm="syz.0.4557" path="/214/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.203316][T14245] netlink: 'syz.0.4561': attribute type 1 has an invalid length. [ 156.211137][T14245] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4561'. [ 156.237350][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4562'. [ 156.487686][T14273] loop7: detected capacity change from 0 to 128 [ 156.495071][T14273] msdos: Unknown parameter 'dot' [ 156.665781][T14290] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4578'. [ 157.003034][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 157.058868][T14319] loop8: detected capacity change from 0 to 1024 [ 157.068654][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 157.077869][T14319] EXT4-fs: Ignoring removed orlov option [ 157.091539][T14319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.134359][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.150366][T14330] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 157.161594][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4599'. [ 157.170701][T14332] netlink: 21 bytes leftover after parsing attributes in process `syz.8.4599'. [ 157.179676][T14332] netlink: 'syz.8.4599': attribute type 2 has an invalid length. [ 157.187465][T14332] netlink: 21 bytes leftover after parsing attributes in process `syz.8.4599'. [ 157.404452][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4609'. [ 157.424746][T14350] erspan0: entered promiscuous mode [ 157.433244][T14350] macvtap1: entered promiscuous mode [ 157.438740][T14350] macvtap1: entered allmulticast mode [ 157.444205][T14350] erspan0: entered allmulticast mode [ 157.455219][T14350] erspan0: left allmulticast mode [ 157.460538][T14350] erspan0: left promiscuous mode [ 157.567270][T14359] tipc: Started in network mode [ 157.572234][T14359] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 157.581588][T14359] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 157.590022][T14359] tipc: Enabled bearer , priority 10 [ 157.612589][T14361] sd 0:0:1:0: device reset [ 158.003286][T14398] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.096788][T14406] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 158.239806][T14422] lo speed is unknown, defaulting to 1000 [ 158.263541][T14428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14428 comm=syz.1.4643 [ 158.284045][T14433] sd 0:0:1:0: device reset [ 158.308410][T14437] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 158.720360][ T3396] tipc: Node number set to 1 [ 158.806632][T14458] netlink: 'syz.0.4655': attribute type 1 has an invalid length. [ 158.814480][T14458] netlink: 'syz.0.4655': attribute type 2 has an invalid length. [ 159.131668][T14495] netlink: 'syz.7.4673': attribute type 20 has an invalid length. [ 159.139981][T14495] netlink: 'syz.7.4673': attribute type 20 has an invalid length. [ 159.153861][T14499] netlink: 'syz.8.4675': attribute type 7 has an invalid length. [ 159.161725][T14499] netlink: 'syz.8.4675': attribute type 8 has an invalid length. [ 159.225815][ T8031] hid_parser_main: 24 callbacks suppressed [ 159.225832][ T8031] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 159.289044][ T8031] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.696717][T14540] lo speed is unknown, defaulting to 1000 [ 159.941452][T14548] loop8: detected capacity change from 0 to 512 [ 160.031410][T14548] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.4694: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 160.071925][T14548] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.4694: Bad quota inode: 3, type: 0 [ 160.086265][T14548] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 160.136313][T14548] EXT4-fs (loop8): mount failed [ 160.199892][T14561] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.292408][T14575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.299878][T14575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.312609][T14575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.320082][T14575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.110787][T14608] loop8: detected capacity change from 0 to 512 [ 161.122755][T14610] macsec1: entered promiscuous mode [ 161.127987][T14610] bridge0: entered promiscuous mode [ 161.133772][T14608] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 161.133814][T14610] bridge0: port 3(macsec1) entered blocking state [ 161.150251][T14610] bridge0: port 3(macsec1) entered disabled state [ 161.160572][T14613] netlink: 'syz.0.4721': attribute type 2 has an invalid length. [ 161.181462][T14610] macsec1: entered allmulticast mode [ 161.181953][T14608] EXT4-fs (loop8): 1 truncate cleaned up [ 161.186840][T14610] bridge0: entered allmulticast mode [ 161.200139][T14608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.201596][T14610] macsec1: left allmulticast mode [ 161.217426][T14610] bridge0: left allmulticast mode [ 161.241956][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.251477][T14610] bridge0: left promiscuous mode [ 161.261672][T14619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.269138][T14619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.276733][T14619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.284224][T14619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.311997][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 161.312009][ T29] audit: type=1400 audit(1755154519.011:5362): avc: denied { create } for pid=14625 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.337946][ T29] audit: type=1400 audit(1755154519.021:5363): avc: denied { setopt } for pid=14625 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.357530][ T29] audit: type=1400 audit(1755154519.021:5364): avc: denied { connect } for pid=14625 comm="syz.8.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.361521][T14628] __nla_validate_parse: 8 callbacks suppressed [ 161.361536][T14628] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4729'. [ 161.448107][T14638] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 161.458214][T14638] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 161.480364][ T29] audit: type=1400 audit(1755154519.171:5365): avc: denied { write } for pid=14636 comm="syz.8.4734" path="socket:[47549]" dev="sockfs" ino=47549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.510842][T14641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14641 comm=syz.7.4735 [ 161.523408][T14641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14641 comm=syz.7.4735 [ 161.541311][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4737'. [ 161.562941][T14647] loop7: detected capacity change from 0 to 512 [ 161.570819][T14649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14649 comm=syz.0.4740 [ 161.583496][T14649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14649 comm=syz.0.4740 [ 161.596818][T14647] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.621370][ T29] audit: type=1400 audit(1755154519.321:5366): avc: denied { mounton } for pid=14654 comm="syz.1.4742" path="/237/file0" dev="tmpfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.647233][T14658] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.649048][T14647] EXT4-fs (loop7): 1 truncate cleaned up [ 161.654476][T14658] smc: net device bond0 erased user defined pnetid SYZ2 [ 161.670678][T14647] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.706947][ T29] audit: type=1400 audit(1755154519.401:5367): avc: denied { connect } for pid=14659 comm="syz.0.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.727317][ T29] audit: type=1400 audit(1755154519.431:5368): avc: denied { write } for pid=14659 comm="syz.0.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.754649][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.766265][T14668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.778162][T14668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.795616][ T29] audit: type=1326 audit(1755154519.491:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.7.4749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2500ebe9 code=0x7ffc0000 [ 161.819390][ T29] audit: type=1326 audit(1755154519.491:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.7.4749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2500ebe9 code=0x7ffc0000 [ 161.843069][ T29] audit: type=1326 audit(1755154519.491:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.7.4749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9f2500ebe9 code=0x7ffc0000 [ 161.871745][T14675] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4752'. [ 161.884370][T14675] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4752'. [ 161.895297][T14679] geneve2: entered promiscuous mode [ 161.969997][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4759'. [ 162.141039][T14712] syzkaller0: entered promiscuous mode [ 162.146579][T14712] syzkaller0: entered allmulticast mode [ 162.289982][T14722] veth3: entered promiscuous mode [ 162.295254][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.302760][T14727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.310757][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.318222][T14727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.332100][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 162.345560][T14729] netlink: 'syz.5.4775': attribute type 1 has an invalid length. [ 162.362898][T14722] lo speed is unknown, defaulting to 1000 [ 162.391317][T14738] loop7: detected capacity change from 0 to 2048 [ 162.414160][T14738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 162.501010][T14738] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.536368][T14754] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 162.557982][T14738] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 162.570595][T14738] EXT4-fs (loop7): This should not happen!! Data will be lost [ 162.570595][T14738] [ 162.580302][T14738] EXT4-fs (loop7): Total free blocks count 0 [ 162.582867][T14750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.586312][T14738] EXT4-fs (loop7): Free/Dirty block details [ 162.598894][T14738] EXT4-fs (loop7): free_blocks=2415919104 [ 162.604692][T14738] EXT4-fs (loop7): dirty_blocks=2096 [ 162.610008][T14738] EXT4-fs (loop7): Block reservation details [ 162.615990][T14738] EXT4-fs (loop7): i_reserved_data_blocks=131 [ 162.627231][T14750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.657366][T14764] netlink: 'syz.5.4791': attribute type 3 has an invalid length. [ 162.718777][T14768] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 162.759884][ T310] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 38 with error 28 [ 162.826765][ T8036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 162.842619][ T8036] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.853677][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4796'. [ 163.017777][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4812'. [ 163.081795][T14817] netlink: 'syz.0.4815': attribute type 29 has an invalid length. [ 163.282305][T14836] pimreg: entered allmulticast mode [ 163.288336][T14836] pimreg: left allmulticast mode [ 163.338227][T14840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14840 comm=syz.1.4826 [ 163.407462][T14840] bond1: (slave bridge2): making interface the new active one [ 163.420379][T14840] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 163.743601][T14912] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007 [ 163.756950][T14914] tipc: New replicast peer: 255.255.255.255 [ 163.763401][T14914] tipc: Enabled bearer , priority 10 [ 164.584667][T14986] syzkaller1: entered promiscuous mode [ 164.590319][T14986] syzkaller1: entered allmulticast mode [ 164.619820][T14990] lo speed is unknown, defaulting to 1000 [ 164.878666][ T8016] tipc: Node number set to 3516153638 [ 165.231077][T15076] lo speed is unknown, defaulting to 1000 [ 165.583774][T15123] IPVS: Error connecting to the multicast addr [ 165.752127][T15136] can0: slcan on ttyS3. [ 165.779325][T15136] can0 (unregistered): slcan off ttyS3. [ 165.789245][T15136] can0: slcan on ttyS3. [ 165.839026][T15135] can0 (unregistered): slcan off ttyS3. [ 166.399455][T15165] loop8: detected capacity change from 0 to 128 [ 166.407759][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 166.407774][ T29] audit: type=1400 audit(1755154524.101:5608): avc: denied { mount } for pid=15164 comm="syz.8.4970" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 166.440945][T15165] syz.8.4970: attempt to access beyond end of device [ 166.440945][T15165] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 166.469267][ T29] audit: type=1400 audit(1755154524.171:5609): avc: denied { unmount } for pid=13486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 166.504549][ T29] audit: type=1400 audit(1755154524.191:5610): avc: denied { name_bind } for pid=15174 comm="syz.7.4976" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 166.612772][ T29] audit: type=1400 audit(1755154524.311:5611): avc: denied { bind } for pid=15192 comm="syz.8.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.632312][ T29] audit: type=1400 audit(1755154524.311:5612): avc: denied { listen } for pid=15192 comm="syz.8.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.651978][ T29] audit: type=1400 audit(1755154524.311:5613): avc: denied { accept } for pid=15192 comm="syz.8.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.656728][T15196] __nla_validate_parse: 3 callbacks suppressed [ 166.656744][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4985'. [ 166.688319][ T29] audit: type=1400 audit(1755154524.311:5614): avc: denied { write } for pid=15192 comm="syz.8.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.742353][ T29] audit: type=1326 audit(1755154524.441:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.8.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030d82ebe9 code=0x7ffc0000 [ 166.766932][ T29] audit: type=1326 audit(1755154524.441:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.8.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030d82ebe9 code=0x7ffc0000 [ 166.790678][ T29] audit: type=1326 audit(1755154524.441:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.8.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f030d82ebe9 code=0x7ffc0000 [ 166.959997][T15234] tipc: Failed to remove unknown binding: 66,1,1/0:4178871690/4178871692 [ 166.968719][T15234] tipc: Failed to remove unknown binding: 66,1,1/0:4178871690/4178871692 [ 167.080924][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5008'. [ 167.093634][T15253] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 167.218079][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5020'. [ 167.227179][T15270] validate_nla: 4 callbacks suppressed [ 167.227195][T15270] netlink: 'syz.1.5020': attribute type 29 has an invalid length. [ 167.240547][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5020'. [ 167.379842][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5030'. [ 167.390671][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5030'. [ 167.807180][T15340] lo speed is unknown, defaulting to 1000 [ 167.898895][T15347] loop8: detected capacity change from 0 to 512 [ 167.906008][T15347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.928525][T15347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.942083][T15347] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.969443][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.021330][T15366] geneve2: entered promiscuous mode [ 168.067155][ T8036] kernel write not supported for file /282/attr/sockcreate (pid: 8036 comm: kworker/0:15) [ 168.215542][T15390] lo speed is unknown, defaulting to 1000 [ 168.467134][T15427] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 168.508933][T15427] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 168.603040][T15444] netlink: 'syz.7.5097': attribute type 1 has an invalid length. [ 168.644814][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5100'. [ 168.717555][T15456] loop8: detected capacity change from 0 to 1024 [ 168.757462][T15456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.779277][T15465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15465 comm=syz.1.5114 [ 168.791927][T15465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15465 comm=syz.1.5114 [ 168.847682][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.008947][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5117'. [ 169.133760][T15508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15508 comm=syz.8.5121 [ 169.133928][T15507] pimreg: entered allmulticast mode [ 169.146526][T15508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15508 comm=syz.8.5121 [ 169.199555][T15513] pimreg: left allmulticast mode [ 169.323415][T15530] loop7: detected capacity change from 0 to 1024 [ 169.351756][T15530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.382305][T12587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.217694][T15563] loop8: detected capacity change from 0 to 512 [ 170.226034][T15563] EXT4-fs: Ignoring removed orlov option [ 170.240127][T15563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.252692][T15563] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.292679][T15563] ================================================================== [ 170.300788][T15563] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 170.308177][T15563] [ 170.310501][T15563] read-write to 0xffff88811a362478 of 8 bytes by interrupt on cpu 0: [ 170.318573][T15563] __xa_clear_mark+0xf5/0x1e0 [ 170.323254][T15563] __folio_end_writeback+0x177/0x470 [ 170.328541][T15563] folio_end_writeback+0x71/0x3d0 [ 170.333611][T15563] ext4_finish_bio+0x459/0x8c0 [ 170.338386][T15563] ext4_end_bio+0x298/0x3b0 [ 170.342897][T15563] bio_endio+0x377/0x410 [ 170.347161][T15563] blk_update_request+0x336/0x730 [ 170.352191][T15563] blk_mq_end_request+0x26/0x50 [ 170.357061][T15563] lo_complete_rq+0x98/0x140 [ 170.361654][T15563] blk_done_softirq+0x77/0xb0 [ 170.366334][T15563] handle_softirqs+0xb7/0x290 [ 170.371009][T15563] run_ksoftirqd+0x1c/0x30 [ 170.375433][T15563] smpboot_thread_fn+0x328/0x530 [ 170.380383][T15563] kthread+0x486/0x510 [ 170.384450][T15563] ret_from_fork+0xda/0x150 [ 170.388946][T15563] ret_from_fork_asm+0x1a/0x30 [ 170.393711][T15563] [ 170.396025][T15563] read to 0xffff88811a362478 of 8 bytes by task 15563 on cpu 1: [ 170.403649][T15563] xas_find_marked+0x218/0x620 [ 170.408406][T15563] find_get_entry+0x5d/0x380 [ 170.413001][T15563] filemap_get_folios_tag+0x13b/0x210 [ 170.418360][T15563] file_write_and_wait_range+0x1ea/0x2c0 [ 170.423992][T15563] generic_buffers_fsync_noflush+0x45/0x120 [ 170.429882][T15563] ext4_sync_file+0x1ab/0x690 [ 170.434560][T15563] vfs_fsync_range+0x10d/0x130 [ 170.439323][T15563] ext4_buffered_write_iter+0x34f/0x3c0 [ 170.444870][T15563] ext4_file_write_iter+0x383/0xf00 [ 170.450222][T15563] vfs_write+0x4a0/0x8e0 [ 170.454472][T15563] ksys_write+0xda/0x1a0 [ 170.458713][T15563] __x64_sys_write+0x40/0x50 [ 170.463294][T15563] x64_sys_call+0x27fe/0x2ff0 [ 170.467964][T15563] do_syscall_64+0xd2/0x200 [ 170.472463][T15563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.478357][T15563] [ 170.480673][T15563] value changed: 0x000000000001fffe -> 0x000000000001fff8 [ 170.487772][T15563] [ 170.490084][T15563] Reported by Kernel Concurrency Sanitizer on: [ 170.496233][T15563] CPU: 1 UID: 0 PID: 15563 Comm: syz.8.5145 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 170.509968][T15563] Tainted: [W]=WARN [ 170.513767][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.523846][T15563] ================================================================== [ 170.555670][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.