last executing test programs: 1.739874923s ago: executing program 1 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, 0x0}, 0x20) 1.684342984s ago: executing program 1 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket(0x2b, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="00000000080000061300000000000000000000006827e04663b720b289884c7b3573b5296b2b6178caa75d7e7447828c959e61326dad8a55203699ac0f44ab2463b71c19dceeb4bb26c702c96c5058118f56ecdc6e362d9c88246a2efd115d4a4fe5d052112bbee1a0275cfff0712ef04d3b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bind$unix(r3, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c30081ff"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x54, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1000, 0x56}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x87a07}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x20040004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0xaf0b5000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.382897458s ago: executing program 0 (id=1135): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.31954988s ago: executing program 0 (id=1136): r0 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1001, 0x0) listxattr(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x4004) syz_clone(0xe38c1300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$TIOCVHANGUP(r9, 0x5437, 0x300) 1.31931554s ago: executing program 3 (id=1137): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, 0x0}, 0x20) 1.27105873s ago: executing program 3 (id=1138): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x30004000) 1.27033777s ago: executing program 3 (id=1139): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.071739393s ago: executing program 2 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.009943964s ago: executing program 2 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1.009052514s ago: executing program 2 (id=1142): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 976.574835ms ago: executing program 2 (id=1143): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000002c0), 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r7, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 812.393997ms ago: executing program 1 (id=1144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5728, &(0x7f0000001480)={0x0, 0x4b08, 0x40, 0x0, 0x1d}, &(0x7f0000000040), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001800)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000380), &(0x7f0000000400)=@ng={0x4, 0x2, "97697a896e071cccb58a73c9e0b8b7a8994945"}, 0x15, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 571.949741ms ago: executing program 1 (id=1146): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 550.346451ms ago: executing program 1 (id=1147): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000100), 0x4) 550.158871ms ago: executing program 1 (id=1148): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)="df", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="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", 0x3b4}], 0x1}}], 0x1, 0x84004) 509.042422ms ago: executing program 4 (id=1149): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, 0x0}, 0x20) 476.687552ms ago: executing program 4 (id=1150): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x30004000) 475.847392ms ago: executing program 0 (id=1151): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 463.404383ms ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 457.083183ms ago: executing program 0 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 448.788403ms ago: executing program 4 (id=1154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000006d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x18) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@private2}, &(0x7f0000000340)=0x14) 414.752883ms ago: executing program 0 (id=1155): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f9078ffffffffe00000014001800b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x2000005, 0x0, 0x1, 0x6, 0x20002, 0x8b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="7bc3cef3844c5552cc1b6d0eebd1ef285dea4790c9081e39b1819e35007396c4993793ed4bf393bbbadc365c03368c46f4066a913e5efc6ea786bb8e455c2f6ccdaf09618f775ec73c1d5bb37c5d962203d759fc25b5a2b1a1ed54c5c6efa0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r0, &(0x7f0000000c00)="da5ae3328ee0c63c2e4e6f02a7ef707bb78f4a99c98495a6f6e0ba849a1ab399b253151d8618f1fd69478ccb71ed2cffb323852d5e763fee71945abcf881a5ed0fcea1d2ad4de3016b097d545c6600e673782ab7daf8229e40303dfb50615dc0437a0ecbd5c7d51888b969d6d8d0b14ae8044097f5af0885188fddd4e9ec9e394e3d3e8eb85913162d3a266828d6890c1c517df5c0acc752fa657ef6977ed83b07c2c57ffee54cba8faff5b400c77b84ea53314af740a9199b", 0xb9, 0x8000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_read_part_table(0x5c8, &(0x7f0000000600)="$eJzs2z1oE2gYB/Anaq6Hwrk4ORzWwclFcTSDlSQqCiHaRRwUFBEzRRAiBAQdbIaWZigdu5RCln5MTcPR4WhpoXMpHXoUOnQ62qXQpTl6fY+7sXdtD4TfD17er3/y5BkyvsF37Vz83u12MxHR7fn3n+5v5QsPr5XulZ9FZOJFRPT++tP04U0mJf761utpv5H242MXOwO7D7Kt9ad7N14uNM6l+89pXJpo95+4Oc7cZG7x8pev1eJgLfdurVjf+ra68mRqJ19uP240px9l779OuaU0X0jzh6jFp3gfr6ISlXgT1VOqP9ravHVwtdiafXt3v9AZmr+dcqUT9nnc+h97h5836303Z66M3KnNLZe3zx/lKv/h3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9vMrd4+cvXanGwlnu3VqxvfVtdeTK1ky+3Hzea04+y91/HLz2HuaWUv5DmD1GLT/E+XkUlKvEmqqdUf7S1eevgarE1+/bufqEzNH875Uonb/VY9T/2Dj9v1vtuzlwZuVObWy5vnz/KVXrO6AcAAAAAAAAAAAAAAAAAAABAROQLD6+V7pWfRWTiRUS0f+7786l/N713z6Tc9bTYSOfjYxc7A7sPsq31p3s3Xi40fkvnn9O4NNHu/2edH/5e/nj2XXFcfwQAAP//HQGWmQ==") r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x140, 0x268, 0x33a, 0x0, 0x268, 0x278, 0x460, 0x460, 0x278, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x100000001}}}}, {{@ipv6={@remote, @empty, [0x0, 0xffffffff, 0xff, 0xff], [0xf6c9b0dd9f2a6849, 0xffffffff, 0xffffffff, 0xff000000], 'bond_slave_0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x84, 0x1, 0x0, 0x19}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) 414.450323ms ago: executing program 3 (id=1156): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) unshare(0x22020600) socket(0x29, 0x5, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x64010102, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f000000a500)=0x5, 0x4) 379.964164ms ago: executing program 3 (id=1157): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r3, 0x0, 0x0) 209.222327ms ago: executing program 3 (id=1158): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x8810) 81.514069ms ago: executing program 4 (id=1159): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 76.591878ms ago: executing program 2 (id=1160): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRES32=r1], 0x28}}], 0x1, 0x20000040) 34.350019ms ago: executing program 4 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 25.353369ms ago: executing program 2 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x2a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0x2, 0x9, 0x1, 0x1, 0x2580, 0x38}}, @common=@srh1={{0x90}, {0x84, 0x1, 0x10, 0xd, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, [0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 0x2110, 0x850}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x9, 0x3b0}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x4, 0x2cc, 0x0, 0x0, "b1afdfd2941b42c58d0393e4411084086d0cdbb4ec01a4e9782e21a080a87cd93f2d1c911241d4caf564c77635b5b6695f0d48668b7ac74a0da0b6619938cce5"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) fremovexattr(r2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 0s ago: executing program 0 (id=1163): socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kernel console output (not intermixed with test programs): ed up [ 29.331551][ T3480] EXT4-fs (loop3): 1 truncate cleaned up [ 29.342030][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.347638][ T3480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.380276][ T3492] EXT4-fs (loop1): 1 truncate cleaned up [ 29.386615][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.443685][ T3480] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 29.487062][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.522136][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.534106][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.559213][ T3520] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 29.586011][ T3525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10'. [ 29.594896][ T3525] netem: change failed [ 29.650539][ T3527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3527 comm=syz.3.14 [ 29.662845][ T3527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3527 comm=syz.3.14 [ 29.808494][ T3535] loop2: detected capacity change from 0 to 512 [ 29.815664][ T3535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.827447][ T3535] EXT4-fs (loop2): 1 truncate cleaned up [ 29.833768][ T3535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.864310][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.393822][ T3547] loop4: detected capacity change from 0 to 512 [ 30.400838][ T3547] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.407513][ T3547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.419969][ T3547] EXT4-fs (loop4): 1 truncate cleaned up [ 30.426161][ T3547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.442257][ T3547] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 30.484398][ T3555] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 30.522853][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.549612][ T3558] tipc: Started in network mode [ 30.554499][ T3558] tipc: Node identity 8, cluster identity 3 [ 30.560445][ T3558] tipc: Node number set to 8 [ 30.619792][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 30.628629][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 30.637395][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 30.661150][ T3569] netlink: 4152 bytes leftover after parsing attributes in process `syz.4.28'. [ 30.673433][ T3568] smc: net device bond0 applied user defined pnetid SYZ2 [ 30.681248][ T3568] smc: net device bond0 erased user defined pnetid SYZ2 [ 30.681930][ T3564] syz.1.27 (3564) used greatest stack depth: 10840 bytes left [ 30.721285][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 30.847859][ T3578] 9pnet_fd: Insufficient options for proto=fd [ 30.857700][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.910007][ T3581] Cannot find del_set index 0 as target [ 30.920699][ T3581] loop3: detected capacity change from 0 to 256 [ 31.065330][ T3575] rdma_rxe: rxe_newlink: failed to add lo [ 31.117645][ T3592] loop3: detected capacity change from 0 to 512 [ 31.124222][ T3592] ======================================================= [ 31.124222][ T3592] WARNING: The mand mount option has been deprecated and [ 31.124222][ T3592] and is ignored by this kernel. Remove the mand [ 31.124222][ T3592] option from the mount to silence this warning. [ 31.124222][ T3592] ======================================================= [ 31.170758][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.183252][ T3592] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.195948][ T3592] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.37: corrupted inode contents [ 31.207739][ T3592] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.37: mark_inode_dirty error [ 31.219265][ T3592] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.37: corrupted inode contents [ 31.232213][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.240665][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.463455][ T3489] syz.0.1 (3489) used greatest stack depth: 10712 bytes left [ 31.472223][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.811205][ T3610] lo speed is unknown, defaulting to 1000 [ 31.886588][ T3616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3616 comm=syz.2.46 [ 31.977702][ T3610] loop4: detected capacity change from 0 to 512 [ 31.985604][ T3610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.992648][ T3610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.004121][ T3610] EXT4-fs (loop4): 1 truncate cleaned up [ 32.010213][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.025818][ T3610] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 32.069464][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.090547][ T3625] loop4: detected capacity change from 0 to 512 [ 32.097775][ T3625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.109855][ T3625] EXT4-fs (loop4): 1 truncate cleaned up [ 32.116303][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.157570][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.205032][ T3629] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 32.866697][ T3653] loop1: detected capacity change from 0 to 512 [ 32.920319][ T3653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.944295][ T3653] EXT4-fs (loop1): 1 truncate cleaned up [ 32.950691][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.037803][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.137473][ T3664] loop0: detected capacity change from 0 to 512 [ 33.163252][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.175867][ T3664] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.187423][ T3664] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.63: corrupted inode contents [ 33.199440][ T3664] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.63: mark_inode_dirty error [ 33.213619][ T3664] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.63: corrupted inode contents [ 33.229310][ T3686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3686 comm=syz.4.70 [ 33.317718][ T3691] syz.4.72 (3691) used greatest stack depth: 10688 bytes left [ 33.371852][ T3698] tipc: Started in network mode [ 33.376808][ T3698] tipc: Node identity 8, cluster identity 3 [ 33.382769][ T3698] tipc: Node number set to 8 [ 33.399871][ T3703] loop4: detected capacity change from 0 to 512 [ 33.407303][ T3703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.420357][ T3703] EXT4-fs (loop4): 1 truncate cleaned up [ 33.421198][ T3706] x_tables: duplicate underflow at hook 2 [ 33.426522][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.460529][ T3706] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 33.493459][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.536792][ T3715] netlink: 200 bytes leftover after parsing attributes in process `syz.4.82'. [ 33.546006][ T3715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.82'. [ 33.680983][ T3720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.708810][ T3720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.007821][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.188204][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.226082][ T29] kauditd_printk_skb: 1399 callbacks suppressed [ 34.226094][ T29] audit: type=1326 audit(1751392454.607:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 34.279838][ T29] audit: type=1326 audit(1751392454.647:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 34.303340][ T29] audit: type=1326 audit(1751392454.657:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.318497][ T3727] loop3: detected capacity change from 0 to 512 [ 34.326654][ T29] audit: type=1326 audit(1751392454.657:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.356021][ T29] audit: type=1326 audit(1751392454.657:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.379418][ T29] audit: type=1326 audit(1751392454.657:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.402899][ T29] audit: type=1326 audit(1751392454.657:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.426246][ T29] audit: type=1326 audit(1751392454.657:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.431532][ T3727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.449466][ T29] audit: type=1326 audit(1751392454.657:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.482587][ T29] audit: type=1326 audit(1751392454.657:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 34.513658][ T3727] EXT4-fs (loop3): 1 truncate cleaned up [ 34.519769][ T3727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.572457][ T3736] x_tables: duplicate underflow at hook 2 [ 34.600868][ T3736] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 34.641329][ T3747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.643943][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.815770][ T3757] loop4: detected capacity change from 0 to 512 [ 34.820721][ T3771] loop1: detected capacity change from 0 to 512 [ 34.829539][ T3771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.841669][ T3771] EXT4-fs (loop1): 1 truncate cleaned up [ 34.842854][ T3774] x_tables: duplicate underflow at hook 2 [ 34.847781][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.869934][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.878096][ T3774] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 34.882472][ T3757] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.907121][ T3757] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.97: corrupted inode contents [ 34.921749][ T3757] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.97: mark_inode_dirty error [ 34.933660][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.942764][ T3757] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.97: corrupted inode contents [ 34.990829][ T3782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.010166][ T3788] syzkaller0: entered promiscuous mode [ 35.015715][ T3788] syzkaller0: entered allmulticast mode [ 35.033560][ T3790] loop3: detected capacity change from 0 to 512 [ 35.040661][ T3790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.052757][ T3790] EXT4-fs (loop3): 1 truncate cleaned up [ 35.058886][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.111310][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.178744][ T3804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3804 comm=syz.3.119 [ 35.191588][ T3804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3804 comm=syz.3.119 [ 35.224009][ T3806] loop2: detected capacity change from 0 to 512 [ 35.232703][ T3806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.247237][ T3806] EXT4-fs (loop2): 1 truncate cleaned up [ 35.255331][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.319532][ T3810] x_tables: duplicate underflow at hook 2 [ 35.400634][ T3810] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 35.411355][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.560691][ T3816] syzkaller0: entered promiscuous mode [ 35.566216][ T3816] syzkaller0: entered allmulticast mode [ 35.702380][ T3827] loop2: detected capacity change from 0 to 512 [ 35.703412][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.709947][ T3827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.728794][ T3827] EXT4-fs (loop2): 1 truncate cleaned up [ 35.734865][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.775953][ T3830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.793357][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.848799][ T3842] x_tables: duplicate underflow at hook 2 [ 35.867222][ T3842] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 35.902609][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 35.914557][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 35.992807][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.3.141 [ 36.005043][ T3857] syzkaller0: entered promiscuous mode [ 36.005059][ T3857] syzkaller0: entered allmulticast mode [ 36.017229][ T3855] Zero length message leads to an empty skb [ 36.028487][ T3849] loop2: detected capacity change from 0 to 512 [ 36.049932][ T3849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.055120][ T3864] loop0: detected capacity change from 0 to 512 [ 36.062448][ T3849] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.082736][ T3864] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.092694][ T3849] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.137: corrupted inode contents [ 36.105631][ T3849] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.137: mark_inode_dirty error [ 36.116890][ T3860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.117380][ T3849] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.137: corrupted inode contents [ 36.145693][ T3864] EXT4-fs (loop0): 1 truncate cleaned up [ 36.151978][ T3864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.194506][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.881815][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.991729][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 37.034067][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 37.210664][ T3899] loop3: detected capacity change from 0 to 512 [ 37.237150][ T3900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.237281][ T3899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.279769][ T3899] EXT4-fs (loop3): 1 truncate cleaned up [ 37.286002][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.312680][ T3909] loop2: detected capacity change from 0 to 512 [ 37.323213][ T3909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.350089][ T3909] EXT4-fs (loop2): 1 truncate cleaned up [ 37.365654][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.377843][ T3909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.410794][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.426819][ T3911] loop4: detected capacity change from 0 to 512 [ 37.449828][ T3911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.462575][ T3911] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.474842][ T3911] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.162: corrupted inode contents [ 37.486802][ T3911] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.162: mark_inode_dirty error [ 37.498983][ T3911] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.162: corrupted inode contents [ 37.678013][ T3940] loop3: detected capacity change from 0 to 512 [ 37.704736][ T3940] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.746097][ T3942] x_tables: duplicate underflow at hook 2 [ 37.777139][ T3942] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 37.788084][ T3940] EXT4-fs (loop3): 1 truncate cleaned up [ 37.794603][ T3940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.928518][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.947688][ T3947] syzkaller0: entered promiscuous mode [ 37.953281][ T3947] syzkaller0: entered allmulticast mode [ 38.136865][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.178809][ T3966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3966 comm=syz.3.186 [ 38.228804][ T3971] x_tables: duplicate underflow at hook 2 [ 38.245935][ T3971] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 38.279695][ T3975] syzkaller0: entered promiscuous mode [ 38.285229][ T3975] syzkaller0: entered allmulticast mode [ 38.460074][ T3998] loop3: detected capacity change from 0 to 128 [ 38.487147][ T4000] x_tables: duplicate underflow at hook 2 [ 38.504664][ T4000] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 38.519025][ T3995] loop4: detected capacity change from 0 to 512 [ 38.530695][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.543287][ T3995] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.543340][ T3998] syz.3.200: attempt to access beyond end of device [ 38.543340][ T3998] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 38.570210][ T3995] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.196: corrupted inode contents [ 38.570753][ T3998] syz.3.200: attempt to access beyond end of device [ 38.570753][ T3998] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 38.596142][ T3995] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.196: mark_inode_dirty error [ 38.596270][ T3998] syz.3.200: attempt to access beyond end of device [ 38.596270][ T3998] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 38.622112][ T3995] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.196: corrupted inode contents [ 38.633936][ T3998] syz.3.200: attempt to access beyond end of device [ 38.633936][ T3998] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 38.647606][ T3998] syz.3.200: attempt to access beyond end of device [ 38.647606][ T3998] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 38.661158][ T3998] syz.3.200: attempt to access beyond end of device [ 38.661158][ T3998] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 38.664582][ T4013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4013 comm=syz.0.204 [ 38.681737][ T3998] syz.3.200: attempt to access beyond end of device [ 38.681737][ T3998] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 38.700483][ T3998] syz.3.200: attempt to access beyond end of device [ 38.700483][ T3998] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 38.713936][ T3998] syz.3.200: attempt to access beyond end of device [ 38.713936][ T3998] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 38.727282][ T3998] syz.3.200: attempt to access beyond end of device [ 38.727282][ T3998] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 38.764022][ T4015] syzkaller0: entered promiscuous mode [ 38.769619][ T4015] syzkaller0: entered allmulticast mode [ 38.845317][ T4019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.924390][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 38.933783][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 39.187671][ T4039] loop3: detected capacity change from 0 to 128 [ 39.295848][ T4042] syzkaller0: entered promiscuous mode [ 39.301501][ T4042] syzkaller0: entered allmulticast mode [ 39.320479][ T4043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4043 comm=syz.2.217 [ 39.341583][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.386239][ T4046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 39.469237][ T4050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.514193][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 39.514207][ T29] audit: type=1400 audit(1751392459.897:2484): avc: denied { remount } for pid=4055 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.547589][ T4058] loop4: detected capacity change from 0 to 512 [ 39.555952][ T29] audit: type=1326 audit(1751392459.897:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.564602][ T4066] x_tables: duplicate underflow at hook 2 [ 39.579408][ T29] audit: type=1326 audit(1751392459.897:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.602046][ T4066] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 39.608469][ T29] audit: type=1326 audit(1751392459.937:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.608494][ T29] audit: type=1326 audit(1751392459.937:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.657241][ T4058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.662742][ T29] audit: type=1326 audit(1751392459.937:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.683469][ T4058] EXT4-fs (loop4): 1 truncate cleaned up [ 39.695792][ T29] audit: type=1326 audit(1751392459.937:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 39.708006][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.724789][ T29] audit: type=1326 audit(1751392459.937:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc14ed8e963 code=0x7ffc0000 [ 39.760756][ T29] audit: type=1326 audit(1751392459.937:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc14ed8d3df code=0x7ffc0000 [ 39.783974][ T29] audit: type=1326 audit(1751392459.937:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc14ed8e9b7 code=0x7ffc0000 [ 39.798664][ T4071] tipc: Started in network mode [ 39.812028][ T4071] tipc: Node identity 8, cluster identity 3 [ 39.817922][ T4071] tipc: Node number set to 8 [ 39.820424][ T4072] loop2: detected capacity change from 0 to 512 [ 39.829949][ T4072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.853410][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.884705][ T4072] EXT4-fs (loop2): 1 truncate cleaned up [ 39.891408][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.896055][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 39.916914][ T4077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 39.936179][ T4079] loop4: detected capacity change from 0 to 128 [ 39.946042][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.992672][ T4084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.034572][ T4089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4089 comm=syz.0.236 [ 40.070941][ T4089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 40.103456][ T4099] loop1: detected capacity change from 0 to 512 [ 40.113358][ T4099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.131915][ T4099] EXT4-fs (loop1): 1 truncate cleaned up [ 40.138005][ T4099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.188051][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.257516][ T4110] loop1: detected capacity change from 0 to 512 [ 40.265717][ T4110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.277284][ T4110] EXT4-fs (loop1): 1 truncate cleaned up [ 40.283486][ T4110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.390354][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.480799][ T4122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.496255][ T3417] lo speed is unknown, defaulting to 1000 [ 40.585346][ T4130] loop2: detected capacity change from 0 to 512 [ 40.644919][ T4130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.671966][ T4132] loop0: detected capacity change from 0 to 128 [ 40.683555][ T4130] EXT4-fs (loop2): 1 truncate cleaned up [ 40.690037][ T4130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.755975][ T4139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4139 comm=syz.3.258 [ 40.773436][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.847872][ T4148] syzkaller0: entered promiscuous mode [ 40.853434][ T4148] syzkaller0: entered allmulticast mode [ 41.100494][ T4161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.287343][ T4172] x_tables: duplicate underflow at hook 2 [ 41.316168][ T4176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4176 comm=syz.4.274 [ 41.328858][ T4176] __nla_validate_parse: 1 callbacks suppressed [ 41.328869][ T4176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 41.354949][ T4172] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 41.451694][ T4179] loop2: detected capacity change from 0 to 512 [ 41.470011][ T4179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.482580][ T4179] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.494753][ T4179] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.273: corrupted inode contents [ 41.507662][ T4179] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.273: mark_inode_dirty error [ 41.520558][ T4179] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.273: corrupted inode contents [ 41.540073][ T4190] tipc: Enabled bearer , priority 0 [ 41.548135][ T4190] tipc: Resetting bearer [ 41.554044][ T4189] tipc: Started in network mode [ 41.559043][ T4189] tipc: Node identity 8, cluster identity 3 [ 41.564955][ T4189] tipc: Node number set to 8 [ 41.571384][ T4188] tipc: Disabling bearer [ 41.615764][ T4192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.673449][ T4197] lo speed is unknown, defaulting to 1000 [ 41.707502][ T4206] loop0: detected capacity change from 0 to 128 [ 41.772610][ T4209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4209 comm=syz.4.288 [ 41.788488][ T4209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 41.926198][ T4223] tipc: Enabled bearer , priority 0 [ 41.939038][ T4223] tipc: Resetting bearer [ 41.965183][ T4221] tipc: Disabling bearer [ 41.993040][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 42.002582][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.299'. [ 42.055136][ T4237] loop0: detected capacity change from 0 to 128 [ 42.193529][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.334780][ T4251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4251 comm=syz.0.306 [ 42.380924][ T4251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 42.467660][ T4255] lo speed is unknown, defaulting to 1000 [ 42.508753][ T4264] tipc: Enabled bearer , priority 0 [ 42.517247][ T4264] tipc: Resetting bearer [ 42.532321][ T4263] tipc: Disabling bearer [ 42.557119][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 42.566370][ T4266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 42.638355][ T4272] loop4: detected capacity change from 0 to 128 [ 42.762446][ T4273] loop2: detected capacity change from 0 to 512 [ 42.792266][ T4273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.804854][ T4273] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.816059][ T4273] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.315: corrupted inode contents [ 42.827932][ T4273] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.315: mark_inode_dirty error [ 42.839769][ T4273] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.315: corrupted inode contents [ 42.859782][ T4292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4292 comm=syz.3.324 [ 42.872719][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 42.886971][ T4295] tipc: Enabled bearer , priority 0 [ 42.893948][ T4295] syzkaller0: entered promiscuous mode [ 42.899547][ T4295] syzkaller0: entered allmulticast mode [ 42.939706][ T4294] tipc: Resetting bearer [ 42.947625][ T4294] tipc: Disabling bearer [ 42.973026][ T4303] loop0: detected capacity change from 0 to 128 [ 42.978603][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 42.988587][ T4305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 43.094811][ T4312] x_tables: duplicate underflow at hook 2 [ 43.114242][ T4312] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 43.356013][ T4335] tipc: Enabled bearer , priority 0 [ 43.385646][ T4337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.406433][ T4335] syzkaller0: entered promiscuous mode [ 43.412062][ T4335] syzkaller0: entered allmulticast mode [ 43.425181][ T4334] tipc: Resetting bearer [ 43.443100][ T4334] tipc: Disabling bearer [ 43.499092][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.514817][ T4339] loop4: detected capacity change from 0 to 128 [ 43.607757][ T4339] bio_check_eod: 597 callbacks suppressed [ 43.607769][ T4339] syz.4.344: attempt to access beyond end of device [ 43.607769][ T4339] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 43.643292][ T4339] syz.4.344: attempt to access beyond end of device [ 43.643292][ T4339] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 43.656798][ T4339] syz.4.344: attempt to access beyond end of device [ 43.656798][ T4339] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 43.670236][ T4339] syz.4.344: attempt to access beyond end of device [ 43.670236][ T4339] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 43.684889][ T4339] syz.4.344: attempt to access beyond end of device [ 43.684889][ T4339] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 43.698364][ T4339] syz.4.344: attempt to access beyond end of device [ 43.698364][ T4339] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 43.711827][ T4339] syz.4.344: attempt to access beyond end of device [ 43.711827][ T4339] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 43.725239][ T4339] syz.4.344: attempt to access beyond end of device [ 43.725239][ T4339] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 43.736672][ T4350] x_tables: duplicate underflow at hook 2 [ 43.738936][ T4339] syz.4.344: attempt to access beyond end of device [ 43.738936][ T4339] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 43.757838][ T4339] syz.4.344: attempt to access beyond end of device [ 43.757838][ T4339] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 43.760602][ T4350] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 43.812702][ T4352] syz.2.351 (4352) used greatest stack depth: 10424 bytes left [ 43.860717][ T4362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.879879][ T4364] tipc: Enabled bearer , priority 0 [ 43.886730][ T4364] syzkaller0: entered promiscuous mode [ 43.892254][ T4364] syzkaller0: entered allmulticast mode [ 43.902607][ T4363] tipc: Resetting bearer [ 43.914531][ T4363] tipc: Disabling bearer [ 43.981174][ T4360] lo speed is unknown, defaulting to 1000 [ 44.032507][ T4376] loop1: detected capacity change from 0 to 128 [ 44.067005][ T4372] loop3: detected capacity change from 0 to 512 [ 44.079142][ T4365] loop4: detected capacity change from 0 to 512 [ 44.085933][ T4379] x_tables: duplicate underflow at hook 2 [ 44.087273][ T4365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.104003][ T4379] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 44.109309][ T4365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.130366][ T4372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.142894][ T4372] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.154473][ T4372] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.357: corrupted inode contents [ 44.168662][ T4372] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.357: mark_inode_dirty error [ 44.171788][ T4365] EXT4-fs (loop4): 1 truncate cleaned up [ 44.185902][ T4372] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.357: corrupted inode contents [ 44.198044][ T4365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.290148][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.372733][ T4403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.423994][ T4410] tipc: Enabled bearer , priority 0 [ 44.431063][ T4410] syzkaller0: entered promiscuous mode [ 44.436530][ T4410] syzkaller0: entered allmulticast mode [ 44.446783][ T4410] tipc: Resetting bearer [ 44.457725][ T4409] tipc: Resetting bearer [ 44.466793][ T4409] tipc: Disabling bearer [ 44.808749][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.976078][ T4420] x_tables: duplicate underflow at hook 2 [ 45.003954][ T4420] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 45.059303][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 45.059316][ T29] audit: type=1326 audit(1751392465.427:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.088899][ T29] audit: type=1326 audit(1751392465.427:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.112240][ T29] audit: type=1326 audit(1751392465.427:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.135595][ T29] audit: type=1326 audit(1751392465.427:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.158901][ T29] audit: type=1326 audit(1751392465.427:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.182241][ T29] audit: type=1326 audit(1751392465.427:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.205598][ T29] audit: type=1326 audit(1751392465.427:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.228975][ T29] audit: type=1326 audit(1751392465.427:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.252330][ T29] audit: type=1326 audit(1751392465.427:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.275664][ T29] audit: type=1326 audit(1751392465.427:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eaf6e929 code=0x7ffc0000 [ 45.357157][ T4429] loop0: detected capacity change from 0 to 128 [ 45.376499][ T4431] lo speed is unknown, defaulting to 1000 [ 45.398902][ T4436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.479288][ T4442] loop2: detected capacity change from 0 to 512 [ 45.486803][ T4442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.501166][ T4442] EXT4-fs (loop2): 1 truncate cleaned up [ 45.507177][ T4442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.549683][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.586359][ T4431] loop3: detected capacity change from 0 to 512 [ 45.593038][ T4431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.600096][ T4431] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.613406][ T4431] EXT4-fs (loop3): 1 truncate cleaned up [ 45.619525][ T4431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.642002][ T4431] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.719091][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.798062][ T4466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.979781][ T4479] loop3: detected capacity change from 0 to 512 [ 45.987475][ T4479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.001014][ T4479] EXT4-fs (loop3): 1 truncate cleaned up [ 46.007431][ T4479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.073439][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.452737][ T4492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.534312][ T4503] x_tables: duplicate underflow at hook 2 [ 46.552839][ T4503] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 46.690784][ T4510] loop3: detected capacity change from 0 to 128 [ 46.996575][ T4526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.132317][ T4536] x_tables: duplicate underflow at hook 2 [ 47.150494][ T4536] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 47.178825][ T4538] loop3: detected capacity change from 0 to 512 [ 47.185803][ T4538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.198142][ T4538] EXT4-fs (loop3): 1 truncate cleaned up [ 47.204232][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.235541][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.414978][ T4544] lo speed is unknown, defaulting to 1000 [ 47.623881][ T4554] tipc: Enabled bearer , priority 0 [ 47.664695][ T4554] syzkaller0: entered promiscuous mode [ 47.670230][ T4554] syzkaller0: entered allmulticast mode [ 47.696944][ T4554] tipc: Resetting bearer [ 47.703805][ T4553] tipc: Resetting bearer [ 47.723289][ T4553] tipc: Disabling bearer [ 47.731395][ T4544] loop3: detected capacity change from 0 to 512 [ 47.738054][ T4544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.745166][ T4544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.757200][ T4544] EXT4-fs (loop3): 1 truncate cleaned up [ 47.763387][ T4544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.777091][ T4544] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.825802][ T4569] loop4: detected capacity change from 0 to 512 [ 47.834570][ T4569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.834887][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.863795][ T4569] EXT4-fs (loop4): 1 truncate cleaned up [ 47.875094][ T4569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.004721][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.053114][ T4583] loop2: detected capacity change from 0 to 512 [ 48.064107][ T4592] tipc: Enabled bearer , priority 0 [ 48.071282][ T4592] syzkaller0: entered promiscuous mode [ 48.076797][ T4592] syzkaller0: entered allmulticast mode [ 48.087509][ T4592] tipc: Resetting bearer [ 48.094963][ T4591] tipc: Resetting bearer [ 48.103141][ T4591] tipc: Disabling bearer [ 48.109411][ T4583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.121975][ T4583] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.133169][ T4583] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.444: corrupted inode contents [ 48.145054][ T4583] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.444: mark_inode_dirty error [ 48.157707][ T4583] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.444: corrupted inode contents [ 48.295327][ T4604] __nla_validate_parse: 2 callbacks suppressed [ 48.295411][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 48.312660][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 48.782021][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.836561][ T4626] loop1: detected capacity change from 0 to 128 [ 48.891654][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4632 comm=syz.2.464 [ 48.906504][ T4632] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 48.918688][ T4634] x_tables: duplicate underflow at hook 2 [ 48.965900][ T4634] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 48.991047][ T2153] bio_check_eod: 277 callbacks suppressed [ 48.991059][ T2153] kworker/u8:9: attempt to access beyond end of device [ 48.991059][ T2153] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 49.010771][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.010771][ T2153] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 49.028686][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.028686][ T2153] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 49.052073][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.052073][ T2153] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 49.065837][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.065837][ T2153] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 49.080414][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.080414][ T2153] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 49.094190][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.094190][ T2153] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 49.107644][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.107644][ T2153] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 49.121219][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.121219][ T2153] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 49.125902][ T4656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4656 comm=syz.0.476 [ 49.135761][ T2153] kworker/u8:9: attempt to access beyond end of device [ 49.135761][ T2153] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 49.151015][ T4656] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 49.220523][ T4662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.295163][ T4671] loop1: detected capacity change from 0 to 128 [ 49.327276][ T4676] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 49.484879][ T4683] tipc: Enabled bearer , priority 0 [ 49.502321][ T4687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4687 comm=syz.4.488 [ 49.543973][ T4688] syzkaller0: entered promiscuous mode [ 49.549494][ T4688] syzkaller0: entered allmulticast mode [ 49.569386][ T4687] netlink: 'syz.4.488': attribute type 1 has an invalid length. [ 49.625511][ T4683] tipc: Resetting bearer [ 49.663194][ T4682] tipc: Resetting bearer [ 49.678193][ T4682] tipc: Disabling bearer [ 49.699106][ T4694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.715638][ T4692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 49.790320][ T4706] smc: net device bond0 applied user defined pnetid SYZ2 [ 49.797741][ T4706] smc: net device bond0 erased user defined pnetid SYZ2 [ 49.827312][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 49.860590][ T4712] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 49.882950][ T4715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4715 comm=syz.2.501 [ 49.898826][ T4718] loop0: detected capacity change from 0 to 128 [ 49.907497][ T4715] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 49.949912][ T4722] tipc: Enabled bearer , priority 0 [ 49.958610][ T4722] syzkaller0: entered promiscuous mode [ 49.964093][ T4722] syzkaller0: entered allmulticast mode [ 49.983271][ T4722] tipc: Resetting bearer [ 49.992131][ T4721] tipc: Resetting bearer [ 50.009055][ T4721] tipc: Disabling bearer [ 50.094156][ T4724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.119573][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.512'. [ 50.135826][ T4745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4745 comm=syz.0.514 [ 50.151465][ T4745] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 50.157937][ T4749] loop4: detected capacity change from 0 to 128 [ 50.201226][ T4754] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.208833][ T4754] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.217286][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 50.347135][ T4764] lo speed is unknown, defaulting to 1000 [ 50.407664][ T4773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.460621][ T4771] tipc: Enabled bearer , priority 0 [ 50.490664][ T4771] syzkaller0: entered promiscuous mode [ 50.496200][ T4771] syzkaller0: entered allmulticast mode [ 50.609683][ T4775] tipc: Resetting bearer [ 50.665655][ T4779] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.683854][ T4770] tipc: Resetting bearer [ 50.714478][ T4770] tipc: Disabling bearer [ 50.733377][ T4783] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.773113][ T4764] loop3: detected capacity change from 0 to 512 [ 50.787772][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 50.803202][ T4764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.810295][ T4764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.820535][ T4785] loop0: detected capacity change from 0 to 128 [ 50.829059][ T4764] EXT4-fs (loop3): 1 truncate cleaned up [ 50.835700][ T4764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.850645][ T4788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4788 comm=syz.1.531 [ 50.867904][ T4764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.876341][ T4788] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 50.976739][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.026567][ T4804] x_tables: duplicate underflow at hook 2 [ 51.056013][ T4798] loop0: detected capacity change from 0 to 512 [ 51.080598][ T4806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.097256][ T4804] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 51.149546][ T4798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.150318][ T4813] tipc: Enabled bearer , priority 0 [ 51.162538][ T4798] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.183662][ T4798] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.532: corrupted inode contents [ 51.195573][ T4798] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.532: mark_inode_dirty error [ 51.211958][ T4813] syzkaller0: entered promiscuous mode [ 51.217486][ T4813] syzkaller0: entered allmulticast mode [ 51.223686][ T4819] loop1: detected capacity change from 0 to 128 [ 51.228261][ T4798] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.532: corrupted inode contents [ 51.252475][ T4824] smc: net device bond0 applied user defined pnetid SYZ2 [ 51.254341][ T4827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4827 comm=syz.1.546 [ 51.260810][ T4824] smc: net device bond0 erased user defined pnetid SYZ2 [ 51.280934][ T4827] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 51.295241][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 51.302521][ T4813] tipc: Resetting bearer [ 51.316137][ T4812] tipc: Resetting bearer [ 51.335421][ T4812] tipc: Disabling bearer [ 51.368979][ T4830] lo speed is unknown, defaulting to 1000 [ 51.482790][ T4830] loop2: detected capacity change from 0 to 512 [ 51.489315][ T4830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.556533][ T4830] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.567359][ T4830] EXT4-fs (loop2): 1 truncate cleaned up [ 51.574348][ T4830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.587662][ T4830] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 51.665892][ T4858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4858 comm=syz.4.558 [ 51.680018][ T4858] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 51.692277][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.785245][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.003577][ T4865] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.011031][ T4865] smc: net device bond0 erased user defined pnetid SYZ2 [ 52.021398][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 52.800810][ T4882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.862834][ T4891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4891 comm=syz.3.571 [ 52.888380][ T4891] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 52.957959][ T29] kauditd_printk_skb: 1026 callbacks suppressed [ 52.957970][ T29] audit: type=1326 audit(1751392473.337:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 52.994072][ T29] audit: type=1326 audit(1751392473.377:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.012084][ T4902] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 53.017413][ T29] audit: type=1326 audit(1751392473.377:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.048556][ T29] audit: type=1326 audit(1751392473.377:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.072185][ T29] audit: type=1326 audit(1751392473.377:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.095518][ T29] audit: type=1326 audit(1751392473.377:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.119072][ T29] audit: type=1326 audit(1751392473.377:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.142367][ T29] audit: type=1326 audit(1751392473.377:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.165944][ T29] audit: type=1326 audit(1751392473.377:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.189361][ T29] audit: type=1326 audit(1751392473.377:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14ed8e929 code=0x7ffc0000 [ 53.709809][ T4921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.961537][ T4929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4929 comm=syz.1.586 [ 54.012390][ T4929] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 54.039423][ T4940] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.047869][ T4935] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 54.067739][ T4940] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.099633][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 54.181736][ T4956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.240326][ T4963] lo speed is unknown, defaulting to 1000 [ 54.291191][ T4965] loop0: detected capacity change from 0 to 512 [ 54.297997][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.316818][ T4965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.340852][ T4965] EXT4-fs (loop0): 1 truncate cleaned up [ 54.347522][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.406929][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.593882][ T4977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4977 comm=syz.4.605 [ 54.606507][ T4977] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 54.715399][ T4987] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 54.885278][ T4997] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.892942][ T4997] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.989547][ T4999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.095702][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 55.246477][ T5008] syz.3.618 (5008) used greatest stack depth: 10096 bytes left [ 55.322020][ T5014] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 55.430376][ T5018] loop1: detected capacity change from 0 to 512 [ 55.437174][ T5018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.444995][ T5027] smc: net device bond0 applied user defined pnetid SYZ2 [ 55.451780][ T5018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.452280][ T5027] smc: net device bond0 erased user defined pnetid SYZ2 [ 55.464229][ T5018] EXT4-fs (loop1): 1 truncate cleaned up [ 55.473844][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 55.483528][ T5018] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 55.642019][ T5032] loop3: detected capacity change from 0 to 128 [ 55.676688][ T5035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.965778][ T5050] tipc: Enabled bearer , priority 0 [ 55.972935][ T5050] syzkaller0: entered promiscuous mode [ 55.979210][ T5050] syzkaller0: entered allmulticast mode [ 55.986904][ T5046] smc: net device bond0 applied user defined pnetid SYZ2 [ 55.994315][ T5046] smc: net device bond0 erased user defined pnetid SYZ2 [ 55.995570][ T5050] tipc: Resetting bearer [ 56.009223][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 56.018188][ T5049] tipc: Resetting bearer [ 56.026262][ T5049] tipc: Disabling bearer [ 56.297061][ T5060] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.316243][ T5061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5061 comm=syz.2.641 [ 56.394015][ T5060] smc: net device bond0 erased user defined pnetid SYZ2 [ 56.457556][ T5061] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 56.476401][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 56.529865][ T5061] bond3: (slave bridge1): making interface the new active one [ 56.551004][ T5061] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 56.563372][ T5058] loop3: detected capacity change from 0 to 512 [ 56.583896][ T5058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.598518][ T5058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.629167][ T5078] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 56.647090][ T5084] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.654359][ T5084] smc: net device bond0 erased user defined pnetid SYZ2 [ 56.663133][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 56.673069][ T5058] EXT4-fs (loop3): 1 truncate cleaned up [ 56.691769][ T5058] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.789900][ T5097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5097 comm=syz.0.657 [ 56.802842][ T5097] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 56.827677][ T5102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.847420][ T5097] bond3: (slave bridge1): making interface the new active one [ 56.855753][ T5097] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 56.918627][ T5113] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 57.036501][ T5126] smc: net device bond0 applied user defined pnetid SYZ2 [ 57.052861][ T5126] smc: net device bond0 erased user defined pnetid SYZ2 [ 57.119371][ T5122] loop1: detected capacity change from 0 to 512 [ 57.126134][ T5122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.133439][ T5122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.145813][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 57.156232][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 57.222489][ T5122] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.429553][ T5139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.584327][ T5145] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 57.721613][ T5153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5153 comm=syz.1.673 [ 57.734527][ T5153] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 57.783824][ T5153] bond4: (slave bridge1): making interface the new active one [ 57.792860][ T5153] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 57.804867][ T5160] tipc: Enabled bearer , priority 0 [ 57.811784][ T5160] syzkaller0: entered promiscuous mode [ 57.817379][ T5160] syzkaller0: entered allmulticast mode [ 57.829234][ T5160] tipc: Resetting bearer [ 57.836724][ T5159] tipc: Resetting bearer [ 57.844018][ T5159] tipc: Disabling bearer [ 57.896188][ T5164] lo speed is unknown, defaulting to 1000 [ 57.963308][ T5172] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 58.068168][ T5179] loop0: detected capacity change from 0 to 512 [ 58.075200][ T5179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.093322][ T5179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.153865][ T5179] EXT4-fs (loop0): 1 truncate cleaned up [ 58.289265][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5191 comm=syz.2.695 [ 58.350765][ T5191] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 58.377556][ T5191] bond4: (slave bridge2): making interface the new active one [ 58.386865][ T5191] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 58.437430][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 58.437443][ T29] audit: type=1326 audit(1751392478.817:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.467044][ T29] audit: type=1326 audit(1751392478.817:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.490631][ T29] audit: type=1326 audit(1751392478.817:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.513978][ T29] audit: type=1326 audit(1751392478.817:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.537323][ T29] audit: type=1326 audit(1751392478.817:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.561330][ T29] audit: type=1326 audit(1751392478.817:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.585032][ T29] audit: type=1326 audit(1751392478.817:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.608670][ T29] audit: type=1326 audit(1751392478.817:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.632077][ T29] audit: type=1326 audit(1751392478.817:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.655376][ T29] audit: type=1326 audit(1751392478.817:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8633ce929 code=0x7ffc0000 [ 58.980483][ T5217] lo speed is unknown, defaulting to 1000 [ 59.130188][ T5227] smc: net device bond0 applied user defined pnetid SYZ2 [ 59.159584][ T5227] smc: net device bond0 erased user defined pnetid SYZ2 [ 59.189887][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 59.373912][ T5217] loop1: detected capacity change from 0 to 512 [ 59.388834][ T5217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.402892][ T5217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.503191][ T5217] EXT4-fs (loop1): 1 truncate cleaned up [ 59.510042][ T5240] x_tables: duplicate underflow at hook 2 [ 59.515998][ T5217] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.516232][ T5240] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 59.626731][ T5242] tipc: Enabled bearer , priority 0 [ 59.635304][ T5242] syzkaller0: entered promiscuous mode [ 59.640817][ T5242] syzkaller0: entered allmulticast mode [ 59.687602][ T5242] tipc: Resetting bearer [ 59.715901][ T5241] tipc: Resetting bearer [ 59.743741][ T5241] tipc: Disabling bearer [ 59.984131][ T5254] loop3: detected capacity change from 0 to 512 [ 60.013059][ T5254] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.028165][ T5254] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.720: corrupted inode contents [ 60.041071][ T5254] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.720: mark_inode_dirty error [ 60.054082][ T5254] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.720: corrupted inode contents [ 60.152639][ T5262] smc: net device bond0 applied user defined pnetid SYZ2 [ 60.166818][ T5262] smc: net device bond0 erased user defined pnetid SYZ2 [ 60.195052][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 60.216703][ T5264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5264 comm=syz.1.723 [ 60.229466][ T5264] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 60.333934][ T5276] lo speed is unknown, defaulting to 1000 [ 60.391226][ T5273] x_tables: duplicate underflow at hook 2 [ 60.397578][ T5273] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 60.469172][ T5282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.490637][ T5276] loop1: detected capacity change from 0 to 512 [ 60.497286][ T5276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.508314][ T5276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.546338][ T5276] EXT4-fs (loop1): 1 truncate cleaned up [ 60.560873][ T5276] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.719058][ T5289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 60.782951][ T5293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5293 comm=syz.2.736 [ 60.796949][ T5293] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 60.878456][ T5299] loop3: detected capacity change from 0 to 128 [ 60.925464][ T5305] smc: net device bond0 applied user defined pnetid SYZ2 [ 60.925496][ T5307] x_tables: duplicate underflow at hook 2 [ 60.933003][ T5305] smc: net device bond0 erased user defined pnetid SYZ2 [ 60.948742][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 60.990812][ T5311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.022511][ T5314] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 61.174230][ T5322] loop1: detected capacity change from 0 to 512 [ 61.190609][ T5322] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.201903][ T5322] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.745: corrupted inode contents [ 61.204156][ T5333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5333 comm=syz.4.750 [ 61.213733][ T5322] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.745: mark_inode_dirty error [ 61.230754][ T5333] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 61.237583][ T5322] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.745: corrupted inode contents [ 61.256947][ T5329] loop0: detected capacity change from 0 to 128 [ 61.290752][ T5337] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.291499][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 61.298090][ T5337] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.318293][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 61.400636][ T5345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.081450][ T5361] loop3: detected capacity change from 0 to 128 [ 62.172558][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 62.253845][ T5371] lo speed is unknown, defaulting to 1000 [ 62.514514][ T5375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.531874][ T5383] x_tables: duplicate underflow at hook 2 [ 62.558131][ T5371] loop2: detected capacity change from 0 to 512 [ 62.564953][ T5371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.571910][ T5371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.589850][ T5389] smc: net device bond0 applied user defined pnetid SYZ2 [ 62.597146][ T5389] smc: net device bond0 erased user defined pnetid SYZ2 [ 62.605635][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 62.627497][ T5371] EXT4-fs (loop2): 1 truncate cleaned up [ 62.634803][ T5391] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 62.647606][ T5371] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.665644][ T5393] loop1: detected capacity change from 0 to 128 [ 62.701110][ T5396] tipc: Enabled bearer , priority 0 [ 62.708416][ T5396] syzkaller0: entered promiscuous mode [ 62.713942][ T5396] syzkaller0: entered allmulticast mode [ 62.723259][ T5396] tipc: Resetting bearer [ 62.736398][ T5394] loop4: detected capacity change from 0 to 512 [ 62.743672][ T5395] tipc: Resetting bearer [ 62.752603][ T5395] tipc: Disabling bearer [ 62.772449][ T5394] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.783680][ T5394] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.773: corrupted inode contents [ 62.796420][ T5394] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.773: mark_inode_dirty error [ 62.808367][ T5394] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.773: corrupted inode contents [ 63.474254][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.782'. [ 63.552548][ T5421] smc: net device bond0 applied user defined pnetid SYZ2 [ 63.561724][ T5421] smc: net device bond0 erased user defined pnetid SYZ2 [ 63.573475][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 63.730810][ T5427] loop3: detected capacity change from 0 to 128 [ 64.025392][ T5448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.105051][ T5458] smc: net device bond0 applied user defined pnetid SYZ2 [ 64.121480][ T5460] smc: net device bond0 erased user defined pnetid SYZ2 [ 64.244135][ T5476] __nla_validate_parse: 2 callbacks suppressed [ 64.244149][ T5476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 64.290952][ T5481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.383946][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 64.406488][ T5491] tipc: Enabling of bearer rejected, failed to enable media [ 64.645958][ T5503] smc: net device bond0 applied user defined pnetid SYZ2 [ 64.683048][ T5505] smc: net device bond0 erased user defined pnetid SYZ2 [ 64.717018][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 64.771463][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'. [ 64.876315][ T5517] syz.0.825 (5517) used greatest stack depth: 10064 bytes left [ 64.916725][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'. [ 64.923041][ T5522] lo speed is unknown, defaulting to 1000 [ 64.943884][ T5526] tipc: Enabled bearer , priority 0 [ 64.952277][ T5526] syzkaller0: entered promiscuous mode [ 64.957755][ T5526] syzkaller0: entered allmulticast mode [ 65.157712][ T5526] tipc: Resetting bearer [ 65.208097][ T5525] tipc: Resetting bearer [ 65.262219][ T5525] tipc: Disabling bearer [ 65.330796][ T5540] x_tables: duplicate underflow at hook 2 [ 65.341392][ T5540] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.367492][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 65.376451][ T5522] loop3: detected capacity change from 0 to 512 [ 65.383818][ T5522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.394765][ T5522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.410572][ T5522] EXT4-fs (loop3): 1 truncate cleaned up [ 65.430171][ T5552] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.437704][ T5522] EXT4-fs mount: 20 callbacks suppressed [ 65.437717][ T5522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.456787][ T5552] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.465227][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 65.476010][ T5522] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 65.566295][ T5560] loop2: detected capacity change from 0 to 128 [ 65.574858][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.599040][ T5557] loop1: detected capacity change from 0 to 512 [ 65.611273][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.623924][ T5557] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.635123][ T5557] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.840: corrupted inode contents [ 65.647001][ T5557] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.840: mark_inode_dirty error [ 65.660327][ T5557] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.840: corrupted inode contents [ 65.673818][ T5563] netlink: 200 bytes leftover after parsing attributes in process `syz.3.843'. [ 65.690302][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.843'. [ 65.728391][ T5576] x_tables: duplicate underflow at hook 2 [ 65.734822][ T5576] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.746404][ T5578] tipc: Enabled bearer , priority 0 [ 65.753299][ T5578] syzkaller0: entered promiscuous mode [ 65.758814][ T5578] syzkaller0: entered allmulticast mode [ 65.774518][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 65.785320][ T5578] tipc: Resetting bearer [ 65.821130][ T5577] tipc: Resetting bearer [ 65.828456][ T5577] tipc: Disabling bearer [ 65.912016][ T5592] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.925268][ T5592] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.952028][ T5597] loop3: detected capacity change from 0 to 128 [ 66.015503][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 66.015527][ T29] audit: type=1400 audit(1751392486.367:4799): avc: denied { create } for pid=5598 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.041091][ T29] audit: type=1400 audit(1751392486.367:4800): avc: denied { bind } for pid=5598 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.060316][ T29] audit: type=1400 audit(1751392486.367:4801): avc: denied { write } for pid=5598 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.817261][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.889716][ T5617] x_tables: duplicate underflow at hook 2 [ 66.896051][ T5617] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 66.932748][ T5620] tipc: Enabled bearer , priority 0 [ 66.941572][ T5620] syzkaller0: entered promiscuous mode [ 66.947107][ T5620] syzkaller0: entered allmulticast mode [ 66.954563][ T5622] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.961683][ T5624] loop3: detected capacity change from 0 to 128 [ 66.963906][ T5622] smc: net device bond0 erased user defined pnetid SYZ2 [ 66.976480][ T5619] tipc: Resetting bearer [ 66.986937][ T5619] tipc: Disabling bearer [ 66.994625][ T5627] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.005055][ T5627] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.119082][ T5630] lo speed is unknown, defaulting to 1000 [ 67.161887][ T5635] loop3: detected capacity change from 0 to 512 [ 67.185650][ T5644] x_tables: duplicate underflow at hook 2 [ 67.198732][ T5644] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 67.217678][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.230377][ T5635] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.243625][ T5635] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.872: corrupted inode contents [ 67.256009][ T5635] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.872: mark_inode_dirty error [ 67.328966][ T5635] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.872: corrupted inode contents [ 67.539927][ T5630] loop4: detected capacity change from 0 to 512 [ 67.568058][ T5659] loop1: detected capacity change from 0 to 128 [ 67.586175][ T5630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.615380][ T5630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.655420][ T5630] EXT4-fs (loop4): 1 truncate cleaned up [ 67.662935][ T5663] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.671365][ T5630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.684930][ T5663] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.709186][ T5630] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.795530][ T5668] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.806024][ T5666] tipc: Enabled bearer , priority 0 [ 67.813612][ T5666] syzkaller0: entered promiscuous mode [ 67.818533][ T5668] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.819243][ T5666] syzkaller0: entered allmulticast mode [ 67.835805][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.847410][ T5665] tipc: Resetting bearer [ 67.895027][ T5665] tipc: Disabling bearer [ 67.904310][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.983973][ T29] audit: type=1326 audit(1751392488.367:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 68.010264][ T5684] loop1: detected capacity change from 0 to 512 [ 68.012379][ T5677] x_tables: duplicate underflow at hook 2 [ 68.017877][ T5684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.038408][ T29] audit: type=1326 audit(1751392488.387:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 68.061820][ T29] audit: type=1326 audit(1751392488.387:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 68.064702][ T5684] EXT4-fs (loop1): 1 truncate cleaned up [ 68.085260][ T29] audit: type=1326 audit(1751392488.387:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 68.098755][ T5677] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 68.114223][ T29] audit: type=1326 audit(1751392488.387:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 68.145229][ T29] audit: type=1326 audit(1751392488.387:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e8993e963 code=0x7ffc0000 [ 68.168436][ T29] audit: type=1326 audit(1751392488.397:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e8993d3df code=0x7ffc0000 [ 68.180757][ T5693] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.192314][ T5684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.286840][ T5693] smc: net device bond0 erased user defined pnetid SYZ2 [ 68.301481][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.447441][ T5700] lo speed is unknown, defaulting to 1000 [ 68.481745][ T5705] loop3: detected capacity change from 0 to 512 [ 68.517982][ T5705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.530613][ T5705] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.593374][ T5705] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.902: corrupted inode contents [ 68.607727][ T5705] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.902: mark_inode_dirty error [ 68.622422][ T5705] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.902: corrupted inode contents [ 68.750250][ T5712] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.757657][ T5716] smc: net device bond0 erased user defined pnetid SYZ2 [ 68.766425][ T5713] tipc: Enabled bearer , priority 0 [ 68.824237][ T5713] syzkaller0: entered promiscuous mode [ 68.829811][ T5713] syzkaller0: entered allmulticast mode [ 68.852776][ T5710] tipc: Resetting bearer [ 68.861107][ T5710] tipc: Disabling bearer [ 69.034561][ T5700] loop1: detected capacity change from 0 to 512 [ 69.041359][ T5700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.043973][ T5727] netlink: 'syz.2.908': attribute type 32 has an invalid length. [ 69.049687][ T5700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.106232][ T5700] EXT4-fs (loop1): 1 truncate cleaned up [ 69.113697][ T5700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.233079][ T5700] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.246672][ T5733] x_tables: duplicate underflow at hook 2 [ 69.253569][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.264250][ T5733] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 69.337598][ T5735] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.387354][ T5735] smc: net device bond0 erased user defined pnetid SYZ2 [ 69.424580][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.522037][ T5744] x_tables: duplicate underflow at hook 2 [ 69.582615][ T5746] loop1: detected capacity change from 0 to 128 [ 69.591053][ T5744] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 69.841362][ T5761] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.869491][ T5763] x_tables: duplicate underflow at hook 2 [ 69.897139][ T5766] smc: net device bond0 erased user defined pnetid SYZ2 [ 69.912688][ T5763] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 69.951298][ T5761] __nla_validate_parse: 8 callbacks suppressed [ 69.951353][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 70.001703][ T5768] lo speed is unknown, defaulting to 1000 [ 70.014670][ T5752] loop2: detected capacity change from 0 to 2048 [ 70.353313][ T5778] loop0: detected capacity change from 0 to 512 [ 70.433003][ T5781] loop4: detected capacity change from 0 to 128 [ 70.498464][ T5778] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.528951][ T5785] netlink: 'syz.3.930': attribute type 32 has an invalid length. [ 70.550707][ T5778] EXT4-fs (loop0): 1 truncate cleaned up [ 70.556684][ T5778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.569876][ T5768] loop1: detected capacity change from 0 to 512 [ 70.570009][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.930'. [ 70.576347][ T5768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.594105][ T5768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.701213][ T5768] EXT4-fs (loop1): 1 truncate cleaned up [ 70.707654][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.728579][ T5768] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 70.834759][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.881866][ T5797] loop4: detected capacity change from 0 to 512 [ 70.950004][ T5797] EXT4-fs: Ignoring removed oldalloc option [ 71.013678][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.034990][ T5797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.109744][ T5805] smc_pnet_add_eth: 1 callbacks suppressed [ 71.109757][ T5805] smc: net device bond0 applied user defined pnetid SYZ2 [ 71.146973][ T5797] EXT4-fs (loop4): 1 truncate cleaned up [ 71.159808][ T5810] smc_pnet_remove_by_pnetid: 1 callbacks suppressed [ 71.159820][ T5810] smc: net device bond0 erased user defined pnetid SYZ2 [ 71.174721][ T5797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.200062][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 71.317338][ T5816] loop1: detected capacity change from 0 to 128 [ 71.426696][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 71.432926][ T29] audit: type=1326 audit(1751392491.807:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.666275][ T5821] loop1: detected capacity change from 0 to 2048 [ 71.703583][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.807774][ T5821] Alternate GPT is invalid, using primary GPT. [ 71.811529][ T29] audit: type=1326 audit(1751392491.827:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.814048][ T5821] loop1: p1 p2 p3 [ 71.837214][ T29] audit: type=1326 audit(1751392491.937:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.864266][ T29] audit: type=1326 audit(1751392491.937:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.887707][ T29] audit: type=1326 audit(1751392491.937:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.911029][ T29] audit: type=1326 audit(1751392491.937:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.934158][ T29] audit: type=1326 audit(1751392491.937:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.957486][ T29] audit: type=1326 audit(1751392491.937:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 71.980803][ T29] audit: type=1326 audit(1751392491.937:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 72.004036][ T29] audit: type=1326 audit(1751392491.937:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8993e929 code=0x7ffc0000 [ 72.119094][ T5838] x_tables: duplicate underflow at hook 2 [ 72.201344][ T5838] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.224527][ T5836] rdma_rxe: rxe_newlink: failed to add lo [ 72.287670][ T5846] x_tables: duplicate underflow at hook 2 [ 72.294108][ T5846] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.310607][ T5847] smc: net device bond0 applied user defined pnetid SYZ2 [ 72.323631][ T5847] smc: net device bond0 erased user defined pnetid SYZ2 [ 72.332490][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 72.364135][ T5851] loop0: detected capacity change from 0 to 128 [ 72.379631][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.405847][ T5854] sock: sock_timestamping_bind_phc: sock not bind to device [ 72.423321][ T5857] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 72.434812][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.442942][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.460633][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.468134][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.476062][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.483483][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.501692][ T5857] team0: Port device bridge0 added [ 72.572155][ T5860] loop1: detected capacity change from 0 to 512 [ 72.595092][ T5857] syz.0.958 (5857) used greatest stack depth: 10056 bytes left [ 72.604068][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.616832][ T5860] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.650424][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.959: corrupted inode contents [ 72.663797][ T5872] x_tables: duplicate underflow at hook 2 [ 72.669985][ T5860] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.959: mark_inode_dirty error [ 72.682483][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.959: corrupted inode contents [ 72.699868][ T5872] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.790056][ T5883] loop3: detected capacity change from 0 to 128 [ 72.886019][ T5901] x_tables: duplicate underflow at hook 2 [ 72.897337][ T5901] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 73.100715][ T5919] loop3: detected capacity change from 0 to 128 [ 73.201434][ T5928] loop4: detected capacity change from 0 to 128 [ 73.391804][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.402858][ T5928] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.415471][ T5928] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.453186][ T5928] lo speed is unknown, defaulting to 1000 [ 73.492460][ T5932] netlink: 200 bytes leftover after parsing attributes in process `syz.0.990'. [ 73.502119][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 73.551474][ T5918] 9pnet_fd: Insufficient options for proto=fd [ 73.571065][ T5938] lo speed is unknown, defaulting to 1000 [ 73.684204][ T5954] loop1: detected capacity change from 0 to 128 [ 73.691961][ T5957] loop2: detected capacity change from 0 to 512 [ 73.701098][ T5957] EXT4-fs: Ignoring removed oldalloc option [ 73.708076][ T5957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.721934][ T5957] EXT4-fs (loop2): 1 truncate cleaned up [ 73.733206][ T5957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.754929][ T5957] siw: device registration error -23 [ 73.770445][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.782910][ T5938] loop3: detected capacity change from 0 to 512 [ 73.831020][ T5938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.847200][ T5938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.866585][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.881308][ T5938] EXT4-fs (loop3): 1 truncate cleaned up [ 73.892849][ T5968] loop2: detected capacity change from 0 to 512 [ 73.905399][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.920415][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 73.943583][ T5968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.970127][ T5938] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 73.983737][ T5968] EXT4-fs (loop2): 1 truncate cleaned up [ 73.990528][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.020887][ T5983] rdma_op ffff8881196fd980 conn xmit_rdma 0000000000000000 [ 74.057333][ T5985] sock: sock_timestamping_bind_phc: sock not bind to device [ 74.093848][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.117734][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.146272][ T5994] loop0: detected capacity change from 0 to 512 [ 74.153611][ T5991] loop2: detected capacity change from 0 to 128 [ 74.164235][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 74.184428][ T5994] EXT4-fs: Ignoring removed oldalloc option [ 74.201072][ T5994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.313799][ T6007] x_tables: duplicate underflow at hook 2 [ 74.320221][ T6007] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 74.445028][ T6011] loop2: detected capacity change from 0 to 128 [ 74.470471][ T6011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.483196][ T6011] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.522652][ T6011] lo speed is unknown, defaulting to 1000 [ 74.658751][ T6011] 9pnet_fd: Insufficient options for proto=fd [ 74.918297][ T6014] smc: net device bond0 applied user defined pnetid SYZ2 [ 74.941138][ T6014] smc: net device bond0 erased user defined pnetid SYZ2 [ 74.962706][ T5994] EXT4-fs (loop0): 1 truncate cleaned up [ 74.999527][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 75.045885][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.150133][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.284778][ T6029] syz_tun: entered allmulticast mode [ 75.307371][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.329539][ T6029] syz_tun: left allmulticast mode [ 75.346965][ T6038] x_tables: duplicate underflow at hook 2 [ 75.378793][ T6038] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 75.389764][ T6035] loop1: detected capacity change from 0 to 2048 [ 75.445567][ T6035] Alternate GPT is invalid, using primary GPT. [ 75.451854][ T6035] loop1: p1 p2 p3 [ 75.586314][ T6061] loop1: detected capacity change from 0 to 512 [ 75.602897][ T6061] EXT4-fs: Ignoring removed oldalloc option [ 75.621356][ T6062] smc: net device bond0 applied user defined pnetid SYZ2 [ 75.628747][ T6061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.648801][ T6062] smc: net device bond0 erased user defined pnetid SYZ2 [ 75.672276][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 75.687480][ T6061] EXT4-fs (loop1): 1 truncate cleaned up [ 75.695086][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.959806][ T6061] siw: device registration error -23 [ 76.106683][ T6075] x_tables: duplicate underflow at hook 2 [ 76.203959][ T6075] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 76.219249][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.336736][ T6081] loop0: detected capacity change from 0 to 128 [ 76.610585][ T6086] loop3: detected capacity change from 0 to 128 [ 77.054526][ T6081] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.066987][ T6081] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.084452][ T6086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.096890][ T6086] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.233356][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.309052][ T6092] loop1: detected capacity change from 0 to 128 [ 77.461999][ T6097] smc: net device bond0 applied user defined pnetid SYZ2 [ 77.578266][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 77.578284][ T29] audit: type=1400 audit(1751392497.937:5558): avc: denied { create } for pid=6100 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.666795][ T29] audit: type=1400 audit(1751392497.997:5559): avc: denied { ioctl } for pid=6100 comm="syz.2.1059" path="socket:[13758]" dev="sockfs" ino=13758 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.667632][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.707652][ T6092] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.720434][ T6092] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.748351][ T6109] unsupported nlmsg_type 40 [ 77.748431][ T29] audit: type=1400 audit(1751392498.127:5560): avc: denied { nlmsg_write } for pid=6108 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.774707][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.794431][ T6110] loop2: detected capacity change from 0 to 256 [ 77.802784][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.940251][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.046257][ T6118] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1064'. [ 78.063322][ T6118] 0ªX¹¦D: renamed from gretap0 (while UP) [ 78.070670][ T6118] 0ªX¹¦D: entered allmulticast mode [ 78.076643][ T6118] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 78.269477][ T3417] IPVS: starting estimator thread 0... [ 78.429201][ T6124] IPVS: using max 2688 ests per chain, 134400 per kthread [ 79.245318][ T6118] Set syz1 is full, maxelem 65536 reached [ 79.337954][ T6138] loop2: detected capacity change from 0 to 128 [ 79.384487][ T6142] loop1: detected capacity change from 0 to 128 [ 79.402918][ T6138] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.415154][ T6138] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.488101][ T6145] smc: net device bond0 erased user defined pnetid SYZ2 [ 79.549566][ T6140] lo speed is unknown, defaulting to 1000 [ 79.611835][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 80.039964][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.064619][ T29] audit: type=1326 audit(1751392500.447:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.098408][ T29] audit: type=1326 audit(1751392500.477:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.121828][ T29] audit: type=1326 audit(1751392500.477:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.145322][ T29] audit: type=1326 audit(1751392500.477:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.168867][ T29] audit: type=1326 audit(1751392500.477:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.192276][ T29] audit: type=1326 audit(1751392500.477:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.215501][ T29] audit: type=1326 audit(1751392500.477:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 80.242284][ T6166] loop1: detected capacity change from 0 to 128 [ 80.367832][ T6164] loop0: detected capacity change from 0 to 2048 [ 80.383685][ T6140] loop4: detected capacity change from 0 to 512 [ 80.416560][ T6140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.429705][ T6166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.441970][ T6166] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.454647][ T6164] Alternate GPT is invalid, using primary GPT. [ 80.460920][ T6164] loop0: p1 p2 p3 [ 80.538951][ T6140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.556861][ T6140] EXT4-fs (loop4): 1 truncate cleaned up [ 80.752547][ T6140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.821575][ T6140] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.822406][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.914250][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.033319][ T6186] loop4: detected capacity change from 0 to 512 [ 81.041344][ T6186] EXT4-fs: Ignoring removed oldalloc option [ 81.053815][ T6186] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.069640][ T6186] EXT4-fs (loop4): 1 truncate cleaned up [ 81.080049][ T6186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.107641][ T6189] loop3: detected capacity change from 0 to 512 [ 81.134364][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.146984][ T6189] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.162098][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.170758][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.180045][ T6196] siw: device registration error -23 [ 81.187112][ T6189] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1086: corrupted inode contents [ 81.200793][ T6189] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1086: mark_inode_dirty error [ 81.213820][ T6189] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1086: corrupted inode contents [ 81.430767][ T6210] x_tables: duplicate underflow at hook 2 [ 81.437142][ T6210] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 81.463443][ T6212] lo speed is unknown, defaulting to 1000 [ 81.558384][ T6212] loop0: detected capacity change from 0 to 512 [ 81.565017][ T6212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.571974][ T6212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.583002][ T6212] EXT4-fs (loop0): 1 truncate cleaned up [ 81.589424][ T6212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.602782][ T6212] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.625053][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.634564][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.664030][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.832500][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.969565][ T3598] IPVS: starting estimator thread 0... [ 82.090232][ T6232] IPVS: using max 2688 ests per chain, 134400 per kthread [ 82.106218][ T6236] smc: net device bond0 applied user defined pnetid SYZ2 [ 82.140890][ T6236] smc: net device bond0 erased user defined pnetid SYZ2 [ 82.185246][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 82.534037][ T6249] loop3: detected capacity change from 0 to 128 [ 82.544142][ T6249] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.556453][ T6249] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.599849][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.642305][ T6256] x_tables: duplicate underflow at hook 2 [ 82.652178][ T6256] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 82.703470][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 83.421925][ T6283] loop0: detected capacity change from 0 to 128 [ 83.440255][ T6283] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.453383][ T6283] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.486207][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.718082][ T6299] loop0: detected capacity change from 0 to 128 [ 83.789837][ T6299] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.803663][ T6299] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.023067][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.278848][ T6311] loop4: detected capacity change from 0 to 512 [ 84.299752][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.312347][ T6311] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.323623][ T6311] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1134: corrupted inode contents [ 84.335960][ T6311] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1134: mark_inode_dirty error [ 84.347670][ T6311] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1134: corrupted inode contents [ 84.405716][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.621182][ T6325] loop0: detected capacity change from 0 to 128 [ 84.950633][ T6325] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.963370][ T6325] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.996648][ T6335] loop2: detected capacity change from 0 to 512 [ 85.025092][ T6325] lo speed is unknown, defaulting to 1000 [ 85.086463][ T6322] 9pnet_fd: Insufficient options for proto=fd [ 85.110564][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.123197][ T6335] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.134775][ T6335] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1143: corrupted inode contents [ 85.135285][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.146788][ T6335] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1143: mark_inode_dirty error [ 85.167379][ T6335] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1143: corrupted inode contents [ 85.346471][ T6363] smc: net device bond0 applied user defined pnetid SYZ2 [ 85.354703][ T6363] smc: net device bond0 erased user defined pnetid SYZ2 [ 85.364412][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 85.381269][ T6367] syz_tun: entered allmulticast mode [ 85.387590][ T6367] syz_tun: left allmulticast mode [ 85.418956][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 85.418970][ T29] audit: type=1400 audit(1751392505.807:5616): avc: denied { ioctl } for pid=6369 comm="syz.3.1157" path="socket:[14282]" dev="sockfs" ino=14282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.431368][ T6365] loop0: detected capacity change from 0 to 2048 [ 85.459472][ T29] audit: type=1326 audit(1751392505.807:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.482992][ T29] audit: type=1326 audit(1751392505.807:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.506479][ T29] audit: type=1326 audit(1751392505.807:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.529937][ T29] audit: type=1326 audit(1751392505.807:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.553316][ T29] audit: type=1326 audit(1751392505.807:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.576707][ T29] audit: type=1326 audit(1751392505.807:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.600391][ T29] audit: type=1326 audit(1751392505.807:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.623695][ T29] audit: type=1326 audit(1751392505.807:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.647127][ T29] audit: type=1326 audit(1751392505.807:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa789afe929 code=0x7ffc0000 [ 85.730336][ T6365] Alternate GPT is invalid, using primary GPT. [ 85.736616][ T6365] loop0: p1 p2 p3 [ 85.770004][ T6382] x_tables: duplicate underflow at hook 2 [ 85.786701][ T3309] ================================================================== [ 85.794797][ T3309] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 85.802694][ T3309] [ 85.805009][ T3309] read-write to 0xffff88811a704de8 of 8 bytes by task 6368 on cpu 0: [ 85.813071][ T3309] shmem_add_to_page_cache+0x37f/0x490 [ 85.818544][ T3309] shmem_get_folio_gfp+0x4e8/0xd60 [ 85.823657][ T3309] shmem_write_begin+0xa8/0x190 [ 85.828523][ T3309] generic_perform_write+0x184/0x490 [ 85.833811][ T3309] shmem_file_write_iter+0xc5/0xf0 [ 85.838926][ T3309] __kernel_write_iter+0x256/0x4c0 [ 85.844050][ T3309] dump_user_range+0x407/0x8c0 [ 85.848826][ T3309] elf_core_dump+0x1dc2/0x1f80 [ 85.853595][ T3309] do_coredump+0x1dfd/0x27b0 [ 85.858188][ T3309] get_signal+0xd85/0xf70 [ 85.862526][ T3309] arch_do_signal_or_restart+0x96/0x480 [ 85.868072][ T3309] irqentry_exit_to_user_mode+0x5e/0xa0 [ 85.873627][ T3309] irqentry_exit+0x12/0x50 [ 85.878042][ T3309] asm_exc_page_fault+0x26/0x30 [ 85.882887][ T3309] [ 85.885207][ T3309] read to 0xffff88811a704de8 of 8 bytes by task 3309 on cpu 1: [ 85.892753][ T3309] shmem_getattr+0x68/0x200 [ 85.897248][ T3309] vfs_getattr_nosec+0x143/0x1e0 [ 85.902192][ T3309] vfs_statx+0x113/0x390 [ 85.906525][ T3309] vfs_fstatat+0x115/0x170 [ 85.910943][ T3309] __se_sys_newfstatat+0x55/0x260 [ 85.915966][ T3309] __x64_sys_newfstatat+0x55/0x70 [ 85.920999][ T3309] x64_sys_call+0x2c22/0x2fb0 [ 85.925669][ T3309] do_syscall_64+0xd2/0x200 [ 85.930173][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.936069][ T3309] [ 85.938390][ T3309] value changed: 0x0000000000001b73 -> 0x0000000000001b76 [ 85.945497][ T3309] [ 85.947816][ T3309] Reported by Kernel Concurrency Sanitizer on: [ 85.953976][ T3309] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 85.966640][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.976714][ T3309] ================================================================== [ 85.987876][ T6388] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 86.006993][ T6387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.