last executing test programs: 17.609233947s ago: executing program 1 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x4, 0x20}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 17.588032559s ago: executing program 1 (id=1520): ftruncate(0xffffffffffffffff, 0x6) r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 17.373060385s ago: executing program 1 (id=1526): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 17.166669671s ago: executing program 1 (id=1530): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[], 0x1, 0x33f, &(0x7f0000003800)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 17.036462422s ago: executing program 1 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 16.938725079s ago: executing program 1 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 16.938422879s ago: executing program 32 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 6.138750102s ago: executing program 5 (id=1778): r0 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x8005) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5.434663987s ago: executing program 5 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.13475704s ago: executing program 5 (id=1791): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.545536716s ago: executing program 5 (id=1810): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 4.191375334s ago: executing program 5 (id=1820): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 3.787540534s ago: executing program 5 (id=1824): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3800000054000100040000000000000807", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 3.787007614s ago: executing program 33 (id=1824): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3800000054000100040000000000000807", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.918713851s ago: executing program 6 (id=1826): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) 1.602443525s ago: executing program 6 (id=1850): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) 1.526349501s ago: executing program 6 (id=1855): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.271240891s ago: executing program 4 (id=1858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.248236622s ago: executing program 4 (id=1859): write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 974.019334ms ago: executing program 4 (id=1863): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 714.658614ms ago: executing program 0 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 673.810887ms ago: executing program 0 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 606.043113ms ago: executing program 0 (id=1874): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003280)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRESDEC], 0x8, 0x2eb, &(0x7f00000004c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 502.801291ms ago: executing program 0 (id=1875): unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x5a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0c342238c52f3b48"}, 0x38) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 499.719781ms ago: executing program 0 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x90, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}]}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000cba327d3b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) 440.137496ms ago: executing program 0 (id=1878): r0 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x8005) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 298.756457ms ago: executing program 2 (id=1881): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 292.552918ms ago: executing program 2 (id=1882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 268.694779ms ago: executing program 3 (id=1883): socket$inet_sctp(0x2, 0x5, 0x84) eventfd2(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) 244.882181ms ago: executing program 2 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r2, 0x100) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1}, 0x8050) 231.698752ms ago: executing program 3 (id=1885): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xc4ec00}, 0x0, 0x32, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) 194.547475ms ago: executing program 2 (id=1886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) set_robust_list(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 178.593887ms ago: executing program 3 (id=1887): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = dup(r2) sendto$packet(r3, &(0x7f0000000400)='(', 0xffffffffffffffce, 0x240400d4, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 164.020557ms ago: executing program 2 (id=1888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 150.700369ms ago: executing program 3 (id=1889): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 129.61037ms ago: executing program 2 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 82.676864ms ago: executing program 3 (id=1891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r1, 0x447ba, 0x7ffff, 0x41, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x30, 0x0, r0, 0x0, 0x0, 0x0, 0x60040815, 0xec618f0018aa0bbd}) 37.248187ms ago: executing program 4 (id=1892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 20.906899ms ago: executing program 4 (id=1893): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 489.21µs ago: executing program 3 (id=1894): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 0s ago: executing program 4 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.233594][ T5157] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 51.252622][ T5157] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 51.279411][ T5157] team0: Failed to send options change via netlink (err -105) [ 51.287006][ T5157] team0: Port device geneve1 added [ 51.308290][ T5152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.390808][ T5152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.447180][ T5152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.505499][ T4388] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.516427][ T4388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.527193][ T2325] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.538152][ T2325] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.583057][ T5170] loop2: detected capacity change from 0 to 512 [ 51.611135][ T5170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.623995][ T5170] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.637199][ T5170] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.651414][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.573: mark_inode_dirty error [ 51.663206][ T5170] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.685418][ T5170] sctp: [Deprecated]: syz.2.573 (pid 5170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.685418][ T5170] Use struct sctp_sack_info instead [ 51.702585][ T5170] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.714559][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.573: mark_inode_dirty error [ 51.728379][ T5170] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.743218][ T5170] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.573: mark_inode_dirty error [ 51.764522][ T5170] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.784516][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.573: mark_inode_dirty error [ 51.798897][ T5176] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.573: corrupted inode contents [ 51.827059][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.858683][ T5184] __nla_validate_parse: 7 callbacks suppressed [ 51.858725][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 51.989442][ T5191] Set syz1 is full, maxelem 6117 reached [ 52.081881][ T5197] loop0: detected capacity change from 0 to 764 [ 52.094439][ T5199] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 52.105361][ T5197] ISOFS: unable to read i-node block [ 52.259551][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 52.270233][ T5206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.277795][ T5206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.324618][ T5214] loop0: detected capacity change from 0 to 164 [ 52.333675][ T5214] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.347001][ T5214] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.358438][ T5214] rock: directory entry would overflow storage [ 52.364625][ T5214] rock: sig=0x4f50, size=4, remaining=3 [ 52.370265][ T5214] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.675703][ T5238] loop0: detected capacity change from 0 to 2048 [ 52.687995][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.781506][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.998665][ T5257] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.606'. [ 53.008200][ T5257] netlink: zone id is out of range [ 53.013359][ T5257] netlink: zone id is out of range [ 53.019686][ T5257] netlink: zone id is out of range [ 53.025414][ T5257] netlink: zone id is out of range [ 53.030848][ T5257] netlink: zone id is out of range [ 53.043750][ T5257] netlink: del zone limit has 8 unknown bytes [ 53.107255][ T5268] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 53.139167][ T5268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.146126][ T5271] loop0: detected capacity change from 0 to 2048 [ 53.168898][ T5268] bond1: (slave veth7): Enslaving as an active interface with a down link [ 53.180800][ T5271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.198383][ T5268] bond1: (slave dummy0): making interface the new active one [ 53.206837][ T5268] dummy0: entered promiscuous mode [ 53.212296][ T5268] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 53.246206][ T5278] netlink: 'syz.4.614': attribute type 4 has an invalid length. [ 53.270900][ T5271] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.291151][ T5279] loop2: detected capacity change from 0 to 4096 [ 53.297776][ T5268] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 53.305635][ T5268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 53.307324][ T5279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.333729][ T5271] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1974 with error 28 [ 53.346201][ T5271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.346201][ T5271] [ 53.355879][ T5271] EXT4-fs (loop0): Total free blocks count 0 [ 53.359649][ T5286] loop3: detected capacity change from 0 to 512 [ 53.362001][ T5271] EXT4-fs (loop0): Free/Dirty block details [ 53.370877][ T5286] EXT4-fs: Ignoring removed orlov option [ 53.374109][ T5271] EXT4-fs (loop0): free_blocks=2415919104 [ 53.379768][ T5286] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.385476][ T5271] EXT4-fs (loop0): dirty_blocks=1984 [ 53.385491][ T5271] EXT4-fs (loop0): Block reservation details [ 53.403261][ T5271] EXT4-fs (loop0): i_reserved_data_blocks=124 [ 53.405487][ T5286] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.617: corrupted in-inode xattr: e_value size too large [ 53.423801][ T5286] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.617: couldn't read orphan inode 15 (err -117) [ 53.436068][ T5268] bond1: (slave dummy0): Releasing active interface [ 53.447088][ T5286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.525296][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.547890][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.649064][ T5299] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 53.676681][ T5299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.711441][ T5306] veth1_to_bond: entered allmulticast mode [ 53.717555][ T5306] veth1_to_bond: left allmulticast mode [ 53.739769][ T5305] bond1: (slave veth5): Enslaving as an active interface with a down link [ 53.807432][ T5299] bond1: (slave dummy0): making interface the new active one [ 53.816209][ T5299] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 53.854885][ T5299] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 53.862689][ T5299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 53.890626][ T5299] bond1: (slave dummy0): Releasing active interface [ 53.909970][ T4374] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1974 with error 28 [ 53.973548][ T5315] mmap: syz.4.626 (5315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.118785][ T5326] lo speed is unknown, defaulting to 1000 [ 54.152265][ T5323] loop0: detected capacity change from 0 to 32768 [ 54.186464][ T5313] loop2: detected capacity change from 0 to 128 [ 54.192973][ T5323] loop0: p1 p2 p3 < p5 p6 > [ 54.193380][ T5313] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.198289][ T5323] loop0: p2 size 16775168 extends beyond EOD, truncated [ 54.212737][ T5313] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.240306][ T5323] loop0: p5 start 4294970168 is beyond EOD, truncated [ 54.350310][ T4375] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.424899][ T5336] Set syz1 is full, maxelem 6117 reached [ 54.436515][ T5338] loop1: detected capacity change from 0 to 512 [ 54.478481][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.491227][ T5338] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.503655][ T5338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.516015][ T5338] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.637: mark_inode_dirty error [ 54.527947][ T5338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.547986][ T5338] sctp: [Deprecated]: syz.1.637 (pid 5338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.547986][ T5338] Use struct sctp_sack_info instead [ 54.565051][ T5338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.576902][ T5338] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.637: mark_inode_dirty error [ 54.589493][ T5338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.601473][ T5338] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.637: mark_inode_dirty error [ 54.612752][ T5338] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.624687][ T5338] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.637: mark_inode_dirty error [ 54.636420][ T5341] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.637: corrupted inode contents [ 54.660106][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.853071][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 54.853087][ T29] audit: type=1326 audit(1765653206.420:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 54.902842][ T5348] veth1_to_bond: entered allmulticast mode [ 54.911351][ T29] audit: type=1326 audit(1765653206.430:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 54.934860][ T29] audit: type=1326 audit(1765653206.430:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 54.958194][ T29] audit: type=1326 audit(1765653206.430:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 54.981621][ T29] audit: type=1326 audit(1765653206.460:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.000553][ T5348] veth1_to_bond: left allmulticast mode [ 55.004944][ T29] audit: type=1326 audit(1765653206.460:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.035805][ T29] audit: type=1326 audit(1765653206.510:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.059217][ T29] audit: type=1326 audit(1765653206.510:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.082639][ T29] audit: type=1326 audit(1765653206.510:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.106009][ T29] audit: type=1326 audit(1765653206.510:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 55.177817][ T5354] lo speed is unknown, defaulting to 1000 [ 55.185508][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 55.186100][ T5356] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 55.250690][ T5363] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 55.267214][ T5356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.277964][ T5352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.296349][ T5352] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 688 with error 28 [ 55.308716][ T5352] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.308716][ T5352] [ 55.318367][ T5352] EXT4-fs (loop1): Total free blocks count 0 [ 55.324559][ T5352] EXT4-fs (loop1): Free/Dirty block details [ 55.330496][ T5352] EXT4-fs (loop1): free_blocks=2415919104 [ 55.336221][ T5352] EXT4-fs (loop1): dirty_blocks=688 [ 55.341472][ T5352] EXT4-fs (loop1): Block reservation details [ 55.347609][ T5352] EXT4-fs (loop1): i_reserved_data_blocks=43 [ 55.362326][ T5366] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.426315][ T5363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.431465][ T5366] netlink: 'syz.4.643': attribute type 10 has an invalid length. [ 55.440688][ T5366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.643'. [ 55.480120][ T5368] bond2: (slave veth5): Enslaving as an active interface with a down link [ 55.512983][ T5356] bond1: (slave dummy0): making interface the new active one [ 55.533544][ T5356] dummy0: entered promiscuous mode [ 55.543091][ T5356] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 55.567970][ T5375] dummy0: left promiscuous mode [ 55.586792][ T5375] bond2: (slave dummy0): making interface the new active one [ 55.599360][ T5375] dummy0: entered promiscuous mode [ 55.604722][ T5375] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 55.614332][ T5366] bond1: (slave dummy0): Releasing active interface [ 55.622946][ T4374] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 688 with error 28 [ 55.683723][ T5363] bond2 (unregistering): (slave veth5): Releasing active interface [ 55.699974][ T5379] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.649: corrupted in-inode xattr: e_value size too large [ 55.714352][ T5363] bond2 (unregistering): (slave dummy0): Releasing active interface [ 55.725579][ T5379] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.649: couldn't read orphan inode 15 (err -117) [ 55.742308][ T5363] bond2 (unregistering): Released all slaves [ 55.744385][ T5379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.900276][ T5389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.911615][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.939184][ T5389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.004088][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.036190][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 56.049864][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 56.050001][ T5406] veth1_to_bond: entered allmulticast mode [ 56.105459][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 56.111613][ T5406] veth1_to_bond: left allmulticast mode [ 56.126421][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 56.231083][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.246824][ T5417] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.260347][ T5417] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.272451][ T5417] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.664: mark_inode_dirty error [ 56.284406][ T5417] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.302272][ T5417] sctp: [Deprecated]: syz.3.664 (pid 5417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.302272][ T5417] Use struct sctp_sack_info instead [ 56.335930][ T5417] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.347987][ T5417] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.664: mark_inode_dirty error [ 56.359494][ T5417] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.371813][ T5417] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.664: mark_inode_dirty error [ 56.383289][ T5417] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.404559][ T5417] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.664: mark_inode_dirty error [ 56.419488][ T5429] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.664: corrupted inode contents [ 56.448042][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.467685][ T5433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.471803][ T5435] EXT4-fs: Ignoring removed oldalloc option [ 56.480275][ T5435] journal_path: Lookup failure for './file0' [ 56.486252][ T5435] EXT4-fs: error: could not find journal device path [ 56.495517][ T5435] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 56.495517][ T5435] program syz.3.669 not setting count and/or reply_len properly [ 56.495541][ T5433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.525036][ T5433] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.568702][ T5441] lo speed is unknown, defaulting to 1000 [ 56.582530][ T5439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.610582][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.025175][ T5465] set_capacity_and_notify: 7 callbacks suppressed [ 57.025202][ T5465] loop0: detected capacity change from 0 to 128 [ 57.040127][ T5465] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.052876][ T5465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.126622][ T1357] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.151140][ T5506] loop0: detected capacity change from 0 to 512 [ 57.183068][ T5506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.200955][ T5506] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.221621][ T5517] loop2: detected capacity change from 0 to 2048 [ 57.231643][ T5517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 57.245724][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.257723][ T5506] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.680: mark_inode_dirty error [ 57.275288][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.313270][ T5506] sctp: [Deprecated]: syz.0.680 (pid 5506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.313270][ T5506] Use struct sctp_sack_info instead [ 57.343769][ T5517] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.347586][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.358721][ T5517] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1490 with error 28 [ 57.377648][ T5506] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.680: mark_inode_dirty error [ 57.382652][ T5517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.382652][ T5517] [ 57.394726][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.403381][ T5517] EXT4-fs (loop2): Total free blocks count 0 [ 57.416760][ T5506] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.680: mark_inode_dirty error [ 57.421040][ T5517] EXT4-fs (loop2): Free/Dirty block details [ 57.432593][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.437901][ T5517] EXT4-fs (loop2): free_blocks=2415919104 [ 57.437916][ T5517] EXT4-fs (loop2): dirty_blocks=1504 [ 57.437981][ T5517] EXT4-fs (loop2): Block reservation details [ 57.450401][ T5506] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.680: mark_inode_dirty error [ 57.455311][ T5517] EXT4-fs (loop2): i_reserved_data_blocks=94 [ 57.484749][ T5537] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.680: corrupted inode contents [ 57.563028][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.614994][ T5559] lo speed is unknown, defaulting to 1000 [ 57.687702][ T5578] netlink: 'syz.4.687': attribute type 27 has an invalid length. [ 57.820397][ T5592] capability: warning: `syz.3.689' uses deprecated v2 capabilities in a way that may be insecure [ 57.838636][ T5578] bridge0: port 3(gretap0) entered disabled state [ 58.032384][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.039657][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.086667][ T4377] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1490 with error 28 [ 58.113065][ T5604] netlink: 'syz.1.703': attribute type 15 has an invalid length. [ 58.120913][ T5604] __nla_validate_parse: 5 callbacks suppressed [ 58.120927][ T5604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'. [ 58.130218][ T5578] dummy0: left promiscuous mode [ 58.183701][ T5609] loop3: detected capacity change from 0 to 128 [ 58.208574][ T5607] loop2: detected capacity change from 0 to 1024 [ 58.218265][ T5607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.239164][ T5607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.264422][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.493573][ T5578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.538988][ T5578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.724871][ T5613] loop2: detected capacity change from 0 to 512 [ 58.865354][ T5623] loop2: detected capacity change from 0 to 512 [ 58.891232][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.903893][ T5623] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.932672][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.994350][ T5621] vlan0: entered allmulticast mode [ 59.004274][ T5621] dummy0: entered allmulticast mode [ 59.028006][ T4360] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.038187][ T4360] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.066312][ T4360] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.091251][ T4360] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.131696][ T5644] loop3: detected capacity change from 0 to 1024 [ 59.138367][ T5644] EXT4-fs: Ignoring removed orlov option [ 59.153278][ T5644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.171257][ T5649] 9p: Bad value for 'rfdno' [ 59.429926][ T5686] loop1: detected capacity change from 0 to 1024 [ 59.448691][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.459712][ T5686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.468127][ T5686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6841c01c, mo2=0003] [ 59.483019][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 59.487122][ T5686] System zones: 0-1, 3-36 [ 59.497443][ T5686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.532154][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.546313][ T5700] ref_ctr_offset mismatch. inode: 0x300 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 59.572147][ T5705] netlink: 'syz.1.723': attribute type 13 has an invalid length. [ 59.625513][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.632828][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.805368][ T4407] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.813765][ T4407] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.833039][ T4407] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.841522][ T4407] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.870072][ T1357] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.878520][ T1357] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.897577][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 59.897592][ T29] audit: type=1400 audit(1765653211.460:1901): avc: denied { bind } for pid=5751 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.923596][ T29] audit: type=1400 audit(1765653211.460:1902): avc: denied { setopt } for pid=5751 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.943449][ T29] audit: type=1400 audit(1765653211.460:1903): avc: denied { write } for pid=5751 comm="syz.1.731" path="socket:[11170]" dev="sockfs" ino=11170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.047785][ T1357] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.056418][ T1357] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.177759][ T5791] loop2: detected capacity change from 0 to 1024 [ 60.187642][ T5791] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.246257][ T5791] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.738: Invalid block bitmap block 0 in block_group 0 [ 60.259831][ T5791] Quota error (device loop2): write_blk: dquota write failed [ 60.267221][ T5791] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 60.277396][ T5791] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.738: Failed to acquire dquot type 0 [ 60.290793][ T5791] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.738: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.304387][ T5791] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.738: Invalid inode bitmap blk 0 in block_group 0 [ 60.317207][ T5791] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 60.317204][ T1357] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 60.334711][ T1357] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 60.346248][ T5791] EXT4-fs (loop2): 1 orphan inode deleted [ 60.352667][ T5791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.385209][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.433493][ T5810] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.743: corrupted in-inode xattr: e_value size too large [ 60.448071][ T5810] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.743: couldn't read orphan inode 15 (err -117) [ 60.460519][ T5810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.683205][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 60.695341][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.710895][ T5834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.726450][ T5834] macvlan2: entered promiscuous mode [ 60.731832][ T5834] macvlan2: entered allmulticast mode [ 60.739531][ T5834] bond2: (slave macvlan2): Opening slave failed [ 60.800463][ T5850] netlink: 'syz.3.746': attribute type 13 has an invalid length. [ 60.884655][ T5857] EXT4-fs: Ignoring removed orlov option [ 60.906640][ T5857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.049355][ T29] audit: type=1400 audit(1765653212.610:1904): avc: denied { cmd } for pid=5881 comm="syz.2.750" path="socket:[12703]" dev="sockfs" ino=12703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.101993][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.499098][ T29] audit: type=1326 audit(1765653213.060:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 61.522588][ T29] audit: type=1326 audit(1765653213.060:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 61.546035][ T29] audit: type=1326 audit(1765653213.060:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 61.575146][ T5956] lo speed is unknown, defaulting to 1000 [ 61.738893][ T5978] EXT4-fs: inline encryption not supported [ 61.780439][ T5978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.821091][ T5978] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.768: Allocating blocks 385-513 which overlap fs metadata [ 61.848883][ T5978] EXT4-fs (loop3): pa ffff888107e7b0e0: logic 16, phys. 129, len 24 [ 61.856975][ T5978] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 61.992226][ T5978] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 62.004580][ T5978] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.004580][ T5978] [ 62.014234][ T5978] EXT4-fs (loop3): Total free blocks count 0 [ 62.020272][ T5978] EXT4-fs (loop3): Free/Dirty block details [ 62.026171][ T5978] EXT4-fs (loop3): free_blocks=128 [ 62.031299][ T5978] EXT4-fs (loop3): dirty_blocks=0 [ 62.036389][ T5978] EXT4-fs (loop3): Block reservation details [ 62.042380][ T5978] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 62.167398][ T5994] set_capacity_and_notify: 3 callbacks suppressed [ 62.167487][ T5994] loop1: detected capacity change from 0 to 512 [ 62.181675][ T5994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.230247][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.300547][ T5994] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.383483][ T6007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6007 comm=syz.4.778 [ 62.412939][ T6009] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 62.436569][ T6009] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 62.448322][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.533144][ T6011] lo speed is unknown, defaulting to 1000 [ 62.557963][ T6016] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 62.566002][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 62.955851][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 62.995178][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 63.048273][ T6068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.099918][ T6068] macvlan2: entered promiscuous mode [ 63.105660][ T6068] macvlan2: entered allmulticast mode [ 63.129148][ T6068] bond3: (slave macvlan2): Opening slave failed [ 63.167975][ T6082] loop0: detected capacity change from 0 to 1024 [ 63.176518][ T6082] EXT4-fs: Ignoring removed orlov option [ 63.198567][ T6082] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.256812][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 63.275731][ T6096] vlan0: entered allmulticast mode [ 63.280947][ T6096] dummy0: entered allmulticast mode [ 63.320645][ T6098] syzkaller0: entered promiscuous mode [ 63.326162][ T6098] syzkaller0: entered allmulticast mode [ 63.336727][ T6104] loop2: detected capacity change from 0 to 1024 [ 63.343967][ T6104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.357047][ T6104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6841c01c, mo2=0003] [ 63.365247][ T6104] System zones: 0-1, 3-36 [ 63.562709][ T6117] loop2: detected capacity change from 0 to 2048 [ 63.640854][ T6121] lo: entered promiscuous mode [ 63.653725][ T3326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 63.668318][ T6109] loop1: detected capacity change from 0 to 512 [ 63.681349][ T3326] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 63.753271][ T6129] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 63.778543][ T6129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.817802][ T6129] bond2: (slave veth5): Enslaving as an active interface with a down link [ 63.835907][ T6129] bond2: (slave dummy0): making interface the new active one [ 63.844455][ T6129] dummy0: entered promiscuous mode [ 63.850170][ T6129] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 63.872923][ T6129] bond2 (unregistering): (slave veth5): Releasing active interface [ 63.899653][ T6129] bond2 (unregistering): (slave dummy0): Releasing active interface [ 63.913887][ T6129] bond2 (unregistering): Released all slaves [ 64.150670][ T6148] loop0: detected capacity change from 0 to 512 [ 64.254837][ T6148] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.345625][ T6144] Set syz1 is full, maxelem 65536 reached [ 64.471575][ T6175] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 64.484994][ T6175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.505642][ T6175] bond2: (slave veth9): Enslaving as an active interface with a down link [ 64.522376][ T6175] dummy0: left promiscuous mode [ 64.534346][ T6175] bond2: (slave dummy0): making interface the new active one [ 64.543189][ T6175] dummy0: entered promiscuous mode [ 64.548479][ T6175] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 64.559690][ T6183] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 64.567596][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.844'. [ 64.583420][ T6175] bond2 (unregistering): (slave veth9): Releasing active interface [ 64.594329][ T6175] bond2 (unregistering): (slave dummy0): Releasing active interface [ 64.603777][ T6175] bond2 (unregistering): Released all slaves [ 64.608845][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.616980][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 64.624208][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 64.631708][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.642001][ T6183] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 64.651054][ T6183] team0: Failed to send options change via netlink (err -105) [ 64.658640][ T6183] team0: Port device geneve1 added [ 64.673878][ T4374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.834955][ T6206] loop1: detected capacity change from 0 to 2048 [ 64.835956][ T6204] lo speed is unknown, defaulting to 1000 [ 64.874598][ T3318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 64.889850][ T3318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 64.932796][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 65.213709][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 65.213724][ T29] audit: type=1326 audit(1765653216.780:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.243674][ T29] audit: type=1326 audit(1765653216.780:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.267020][ T29] audit: type=1326 audit(1765653216.780:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.290387][ T29] audit: type=1326 audit(1765653216.780:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.313753][ T29] audit: type=1326 audit(1765653216.780:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.337035][ T29] audit: type=1326 audit(1765653216.780:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.360354][ T29] audit: type=1326 audit(1765653216.780:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.383733][ T29] audit: type=1326 audit(1765653216.780:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.407100][ T29] audit: type=1326 audit(1765653216.780:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.430396][ T29] audit: type=1326 audit(1765653216.780:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65ec5ff749 code=0x7ffc0000 [ 65.579893][ T6256] loop1: detected capacity change from 0 to 256 [ 65.614340][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 65.645996][ T6261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.652212][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 65.661384][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 65.678638][ T6261] macvlan2: entered promiscuous mode [ 65.684036][ T6261] macvlan2: entered allmulticast mode [ 65.691770][ T6261] bond2: (slave macvlan2): Opening slave failed [ 65.843520][ T6284] cgroup: fork rejected by pids controller in /syz3 [ 66.293470][ T6178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.347918][ T1357] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.360578][ T1357] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.372261][ T1357] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385730][ T1357] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429519][T13035] loop2: detected capacity change from 0 to 1024 [ 66.448058][T13097] loop0: detected capacity change from 0 to 1024 [ 66.455850][T13097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.468562][T13035] EXT4-fs mount: 10 callbacks suppressed [ 66.468576][T13035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.479484][T13097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6841c01c, mo2=0003] [ 66.499360][T13097] System zones: 0-1, 3-36 [ 66.546366][T13097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.568818][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.645640][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.114660][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 67.123566][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 67.200027][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 67.261687][ T4559] hid_parser_main: 8 callbacks suppressed [ 67.261740][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.274984][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.278622][T15981] vlan2: entered allmulticast mode [ 67.282467][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.282501][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.302367][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.309881][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.317418][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.324804][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.332257][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.339630][ T4559] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.349672][ T4559] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 67.657385][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 67.740854][ T4537] IPVS: starting estimator thread 0... [ 67.769895][T16034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.788723][T16034] bond2: (slave veth11): Enslaving as an active interface with an up link [ 67.802517][T16034] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 67.814307][T16034] bond2 (unregistering): (slave veth11): Releasing backup interface [ 67.824215][T16034] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 67.829420][T16031] IPVS: using max 2304 ests per chain, 115200 per kthread [ 67.840448][T16034] bond2 (unregistering): Released all slaves [ 68.145173][T16069] loop0: detected capacity change from 0 to 164 [ 68.155281][T16069] syz.0.974: attempt to access beyond end of device [ 68.155281][T16069] loop0: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 68.169560][T16069] syz.0.974: attempt to access beyond end of device [ 68.169560][T16069] loop0: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 68.218095][T16078] bridge: RTM_NEWNEIGH with invalid ether address [ 68.288395][T16084] loop3: detected capacity change from 0 to 1024 [ 68.295270][T16084] EXT4-fs: Ignoring removed orlov option [ 68.302199][T16084] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.332429][T16084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.405790][T16096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.450874][T16096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.510920][T16096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.570734][T16096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.641419][ T4374] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.656927][ T4374] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.665471][ T4374] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.674073][ T4374] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.732367][T16117] netlink: 'syz.4.995': attribute type 3 has an invalid length. [ 68.740276][T16117] netlink: 'syz.4.995': attribute type 3 has an invalid length. [ 68.894614][T16134] tipc: Started in network mode [ 68.899631][T16134] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 68.908491][T16134] tipc: Enabling of bearer rejected, failed to enable media [ 69.174776][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.252809][T16147] loop1: detected capacity change from 0 to 164 [ 69.339938][T16147] ISOFS: unable to read i-node block [ 69.345234][T16147] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 69.688112][T16156] loop3: detected capacity change from 0 to 512 [ 69.694824][T16156] EXT4-fs: Ignoring removed i_version option [ 69.700834][T16156] EXT4-fs: Ignoring removed bh option [ 69.706598][T16156] /dev/loop3: Can't open blockdev [ 69.734728][T16158] __nla_validate_parse: 2 callbacks suppressed [ 69.734775][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 69.750050][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 69.954636][T16166] lo speed is unknown, defaulting to 1000 [ 70.096167][T16173] loop3: detected capacity change from 0 to 2048 [ 70.106878][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 70.171089][T16173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.215922][T16173] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.237785][T16173] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 70.250113][T16173] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.250113][T16173] [ 70.259788][T16173] EXT4-fs (loop3): Total free blocks count 0 [ 70.265821][T16173] EXT4-fs (loop3): Free/Dirty block details [ 70.271732][T16173] EXT4-fs (loop3): free_blocks=2415919104 [ 70.272770][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 70.272783][ T29] audit: type=1326 audit(1765653221.830:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16165 comm="syz.2.1016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x0 [ 70.277514][T16173] EXT4-fs (loop3): dirty_blocks=32 [ 70.277529][T16173] EXT4-fs (loop3): Block reservation details [ 70.317847][T16173] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 70.325066][T16192] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.370135][ T29] audit: type=1400 audit(1765653221.940:2384): avc: denied { module_request } for pid=16172 comm="syz.3.1020" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.400972][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 70.418346][T16194] team1: entered promiscuous mode [ 70.423433][T16194] team1: entered allmulticast mode [ 70.428707][ T29] audit: type=1400 audit(1765653221.940:2385): avc: denied { sys_module } for pid=16172 comm="syz.3.1020" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.452313][T16194] 8021q: adding VLAN 0 to HW filter on device team1 [ 70.455657][ T29] audit: type=1400 audit(1765653222.020:2386): avc: denied { write } for pid=16199 comm="+}[@" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.482214][T16200] vhci_hcd vhci_hcd.2: invalid port number 96 [ 70.488362][T16200] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0 [ 70.517906][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 70.526883][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 70.606476][T16212] syzkaller0: entered promiscuous mode [ 70.612123][T16212] syzkaller0: entered allmulticast mode [ 70.621949][ T29] audit: type=1400 audit(1765653222.190:2387): avc: denied { cmd } for pid=16217 comm="syz.1.1037" path="socket:[15056]" dev="sockfs" ino=15056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.699367][ T29] audit: type=1400 audit(1765653222.220:2388): avc: denied { mounton } for pid=16220 comm="syz.0.1038" path="/186/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.790417][ T29] audit: type=1400 audit(1765653222.350:2389): avc: denied { watch watch_reads } for pid=16226 comm="syz.1.1039" path="/230/file0" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.857482][T16231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.881308][ T29] audit: type=1400 audit(1765653222.450:2390): avc: denied { read } for pid=16233 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.951062][T16235] bond2: (slave veth7): Enslaving as an active interface with an up link [ 70.977933][T16231] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 70.998844][T16231] bond2 (unregistering): (slave veth7): Releasing backup interface [ 71.030120][ T29] audit: type=1400 audit(1765653222.600:2391): avc: denied { write } for pid=16245 comm="syz.2.1048" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.052043][T16231] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 71.064627][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 71.076367][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 71.086399][T16231] bond2 (unregistering): Released all slaves [ 71.162972][T16264] netlink: 'syz.1.1055': attribute type 13 has an invalid length. [ 71.225195][ T29] audit: type=1400 audit(1765653222.790:2392): avc: denied { bind } for pid=16271 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.493786][T16299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.516387][T16299] bond3: (slave veth7): Enslaving as an active interface with an up link [ 71.518569][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 71.532941][T16299] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 71.533721][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 71.563552][T16299] bond3 (unregistering): (slave veth7): Releasing backup interface [ 71.582274][T16299] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 71.609025][T16299] bond3 (unregistering): Released all slaves [ 71.740781][T16314] loop0: detected capacity change from 0 to 4096 [ 71.749726][T16314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.772260][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.794378][T16321] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.805038][T16319] vhci_hcd vhci_hcd.2: invalid port number 96 [ 71.811212][T16319] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0 [ 71.826585][T16323] pim6reg: entered allmulticast mode [ 71.833873][T16323] pim6reg: left allmulticast mode [ 71.842630][T16325] syz.3.1083 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.870536][T16321] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.920695][T16321] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.972194][T16321] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.992645][T16333] loop1: detected capacity change from 0 to 512 [ 71.999167][T16333] EXT4-fs: Ignoring removed i_version option [ 72.005285][T16333] EXT4-fs: Ignoring removed bh option [ 72.016910][ T4374] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.027510][T16333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.028954][ T4374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.040661][T16333] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.056017][ T4374] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.080448][ T4377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.089072][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.123294][T16340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.142550][T16340] bond3: (slave veth7): Enslaving as an active interface with an up link [ 72.161837][T16340] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 72.180556][T16340] bond3 (unregistering): (slave veth7): Releasing backup interface [ 72.189725][T16340] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 72.198393][T16340] bond3 (unregistering): Released all slaves [ 72.300862][T16357] IPVS: Unknown mcast interface: [ 72.457258][T16363] SELinux: ebitmap: truncated map [ 72.462767][T16363] SELinux: failed to load policy [ 72.490551][T16365] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 72.880383][T16378] SELinux: Context ?J is not valid (left unmapped). [ 72.917601][T16378] lo speed is unknown, defaulting to 1000 [ 73.046398][T16380] loop2: detected capacity change from 0 to 512 [ 73.057379][T16380] EXT4-fs: Ignoring removed i_version option [ 73.063406][T16380] EXT4-fs: Ignoring removed bh option [ 73.132208][T16380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.165130][T16380] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.265123][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.328915][T16393] loop2: detected capacity change from 0 to 512 [ 73.335685][T16393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.348741][T16393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.380497][T16393] EXT4-fs (loop2): 1 truncate cleaned up [ 73.386747][T16393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.505459][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.937242][T16424] netlink: 'syz.4.1125': attribute type 13 has an invalid length. [ 74.106717][T16428] loop0: detected capacity change from 0 to 1024 [ 74.110792][T16438] loop1: detected capacity change from 0 to 512 [ 74.119689][T16428] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.127960][T16435] loop3: detected capacity change from 0 to 4096 [ 74.130697][T16428] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 74.137717][T16438] /dev/loop1: Can't open blockdev [ 74.157365][T16428] EXT4-fs (loop0): invalid journal inode [ 74.164141][T16428] EXT4-fs (loop0): can't get journal size [ 74.183844][T16435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.200620][T16428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.219895][T16428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.272139][T16450] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 74.325168][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.586568][T16474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.596614][T16474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.760543][T16477] __nla_validate_parse: 8 callbacks suppressed [ 74.760601][T16477] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1144'. [ 74.828174][T16479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1146'. [ 75.035035][T16491] syz_tun: entered allmulticast mode [ 75.058965][T16490] syz_tun: left allmulticast mode [ 75.167726][T16496] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 75.175586][T16496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 75.217478][T16496] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 75.249479][T16496] team0: Failed to send options change via netlink (err -105) [ 75.256969][T16496] team0: Port device geneve1 added [ 75.269952][ T1357] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.298163][T16493] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.339021][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 75.347985][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 75.430125][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 75.430139][ T29] audit: type=1400 audit(1765653227.000:2615): avc: denied { unmount } for pid=16511 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.472772][ T29] audit: type=1400 audit(1765653227.040:2616): avc: denied { bind } for pid=16514 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.492224][ T29] audit: type=1400 audit(1765653227.040:2617): avc: denied { name_bind } for pid=16514 comm="syz.0.1164" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.514146][ T29] audit: type=1400 audit(1765653227.040:2618): avc: denied { node_bind } for pid=16514 comm="syz.0.1164" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 75.567592][ T29] audit: type=1326 audit(1765653227.130:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 75.592877][T16522] loop0: detected capacity change from 0 to 512 [ 75.601877][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 75.611062][T16522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.625186][T16523] team1: entered promiscuous mode [ 75.630267][T16523] team1: entered allmulticast mode [ 75.635484][ T29] audit: type=1326 audit(1765653227.130:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 75.659011][ T29] audit: type=1326 audit(1765653227.130:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 75.682505][ T29] audit: type=1326 audit(1765653227.130:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 75.706028][ T29] audit: type=1326 audit(1765653227.130:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a0590f783 code=0x7ffc0000 [ 75.719855][T16523] 8021q: adding VLAN 0 to HW filter on device team1 [ 75.729318][ T29] audit: type=1326 audit(1765653227.140:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a0590e1ff code=0x7ffc0000 [ 75.760422][T16522] EXT4-fs (loop0): 1 truncate cleaned up [ 75.766589][T16522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.803988][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.979768][ T4365] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.020753][ T4365] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059327][ T4365] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077666][ T4365] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358218][T16565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.418080][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 76.428442][T16565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.471406][T16565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.581071][T16565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.612675][T16593] xt_TCPMSS: Only works on TCP SYN packets [ 76.696434][ T4365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722385][T16599] loop2: detected capacity change from 0 to 512 [ 76.729096][ T4365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.746710][ T4365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.755547][T16599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.765442][ T4365] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.822595][T16599] EXT4-fs (loop2): 1 truncate cleaned up [ 76.828591][T16599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.013405][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.157904][T16629] loop0: detected capacity change from 0 to 512 [ 77.215297][T16629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.249426][T16629] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.260431][T16629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.372378][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 77.831687][ T3399] kernel read not supported for file /537/loginuid (pid: 3399 comm: kworker/0:4) [ 77.879036][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 77.928565][T16695] netlink: 'syz.2.1244': attribute type 30 has an invalid length. [ 78.291331][T16720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 78.300341][T16720] netlink: 'syz.2.1254': attribute type 7 has an invalid length. [ 78.308055][T16720] netlink: 'syz.2.1254': attribute type 8 has an invalid length. [ 78.770217][T16744] loop2: detected capacity change from 0 to 8192 [ 79.786158][T16764] netlink: 'syz.0.1270': attribute type 7 has an invalid length. [ 79.794006][T16764] __nla_validate_parse: 1 callbacks suppressed [ 79.794021][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 79.818905][T16766] lo speed is unknown, defaulting to 1000 [ 80.064198][T16795] ip6gre1: entered allmulticast mode [ 80.356279][T16819] loop0: detected capacity change from 0 to 512 [ 80.408289][T16819] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 80.429376][T16819] EXT4-fs (loop0): mount failed [ 80.612209][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 80.612224][ T29] audit: type=1400 audit(1765653232.180:2863): avc: denied { mount } for pid=16842 comm="syz.3.1303" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.716917][ T29] audit: type=1326 audit(1765653232.210:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.740499][ T29] audit: type=1326 audit(1765653232.210:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.763989][ T29] audit: type=1326 audit(1765653232.210:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.787558][ T29] audit: type=1326 audit(1765653232.210:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.811081][ T29] audit: type=1326 audit(1765653232.210:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.834611][ T29] audit: type=1326 audit(1765653232.210:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.858171][ T29] audit: type=1326 audit(1765653232.210:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.881687][ T29] audit: type=1326 audit(1765653232.210:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.905201][ T29] audit: type=1326 audit(1765653232.210:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 80.930918][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 80.952407][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 80.955011][T16854] netlink: 'syz.0.1307': attribute type 13 has an invalid length. [ 81.013708][T16858] loop1: detected capacity change from 0 to 1024 [ 81.030520][ T4363] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.032695][T16858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.038963][ T4363] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.060421][T16862] syz_tun: entered allmulticast mode [ 81.066275][T16853] syz_tun: left allmulticast mode [ 81.069555][T16858] Invalid ELF header magic: != ELF [ 81.087725][ T4363] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.101173][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.112756][ T4363] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.130627][T16866] loop0: detected capacity change from 0 to 1764 [ 81.144748][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 81.156857][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 81.207102][T16878] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 81.275578][T16888] veth0: entered promiscuous mode [ 81.282698][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 81.315932][T16890] syzkaller0: entered allmulticast mode [ 81.323507][T16890] syzkaller0 (unregistering): left allmulticast mode [ 81.361255][T16893] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 81.383447][T16895] ÿ: renamed from bond_slave_0 (while UP) [ 81.523208][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 81.536983][T16910] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1330'. [ 81.562211][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 81.665663][T16919] tmpfs: Bad value for 'mpol' [ 81.891872][T16942] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1345'. [ 81.966012][T16949] sch_fq: defrate 0 ignored. [ 82.134061][T16975] loop0: detected capacity change from 0 to 512 [ 82.178724][T16975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.406463][T16994] Invalid ELF header magic: != ELF [ 82.472030][T17000] loop2: detected capacity change from 0 to 128 [ 82.501480][T17000] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.522858][T17000] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.684873][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.804713][T17029] geneve2: entered promiscuous mode [ 82.810007][T17029] geneve2: entered allmulticast mode [ 82.836003][T17034] netlink: 'syz.1.1384': attribute type 13 has an invalid length. [ 82.847259][T17034] syz_tun: entered allmulticast mode [ 82.853226][T17033] syz_tun: left allmulticast mode [ 82.920779][T17046] loop1: detected capacity change from 0 to 164 [ 82.927983][T17046] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.938270][T17046] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.946936][T17046] Symlink component flag not implemented [ 82.952611][T17046] Symlink component flag not implemented [ 82.972286][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.056581][T17065] loop0: detected capacity change from 0 to 1024 [ 83.064041][T17065] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.075042][T17065] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.085694][T17065] JBD2: no valid journal superblock found [ 83.091446][T17065] EXT4-fs (loop0): Could not load journal inode [ 83.107455][T17065] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 83.159024][T17083] loop0: detected capacity change from 0 to 164 [ 83.166464][T17083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.187794][T17083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.198128][T17083] Symlink component flag not implemented [ 83.203931][T17083] Symlink component flag not implemented [ 83.415708][T17098] lo speed is unknown, defaulting to 1000 [ 83.630320][T17110] bridge: RTM_NEWNEIGH with invalid ether address [ 83.641289][T17112] loop2: detected capacity change from 0 to 1024 [ 83.665042][T17112] EXT4-fs: Ignoring removed oldalloc option [ 83.671786][T17112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.700040][T17112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.830483][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.962839][T17141] geneve2: entered promiscuous mode [ 83.968087][T17141] geneve2: entered allmulticast mode [ 84.096368][T17164] lo speed is unknown, defaulting to 1000 [ 84.397103][T17191] geneve2: entered promiscuous mode [ 84.402426][T17191] geneve2: entered allmulticast mode [ 84.732321][T17241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.772835][T17241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.828856][T17241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.844920][T17252] __nla_validate_parse: 16 callbacks suppressed [ 84.844933][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 84.864074][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 84.910624][T17241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.966647][ T4365] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.977840][ T4365] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.989405][ T4365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003475][ T4365] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.173240][T17270] loop0: detected capacity change from 0 to 128 [ 85.181613][T17270] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.202913][T17270] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.276854][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.963030][T17304] ref_ctr_offset mismatch. inode: 0x61a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x30656c69662f2e [ 86.206384][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 86.206397][ T29] audit: type=1400 audit(1765653237.770:3036): avc: denied { execute } for pid=17309 comm="syz.4.1501" path="/memory.events" dev="ramfs" ino=18896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 86.423219][ T29] audit: type=1326 audit(1765653237.980:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.446889][ T29] audit: type=1326 audit(1765653237.980:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.470442][ T29] audit: type=1326 audit(1765653237.980:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.493847][ T29] audit: type=1326 audit(1765653237.980:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.517386][ T29] audit: type=1326 audit(1765653237.980:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.540851][ T29] audit: type=1326 audit(1765653237.980:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.564439][ T29] audit: type=1326 audit(1765653237.980:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.588082][ T29] audit: type=1326 audit(1765653237.980:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.611621][ T29] audit: type=1326 audit(1765653237.980:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11b11af749 code=0x7ffc0000 [ 86.744375][T17331] loop0: detected capacity change from 0 to 164 [ 86.757504][T17332] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.767310][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 86.773320][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.780156][T17331] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.801594][T17334] loop2: detected capacity change from 0 to 512 [ 86.807198][T17331] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.826447][T17331] Symlink component flag not implemented [ 86.832123][T17331] Symlink component flag not implemented [ 86.838816][T17332] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.848225][T17331] Symlink component flag not implemented (7) [ 86.854725][T17331] Symlink component flag not implemented (116) [ 86.873355][T17336] pimreg: entered allmulticast mode [ 86.885646][T17336] pimreg: left allmulticast mode [ 86.931977][T17332] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.981211][T17332] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.076927][ T4363] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.091104][ T4363] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102590][ T4363] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.114500][ T4363] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.461822][T17366] lo speed is unknown, defaulting to 1000 [ 87.711776][T17378] loop1: detected capacity change from 0 to 512 [ 87.761297][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 87.772450][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 88.030556][T17391] lo speed is unknown, defaulting to 1000 [ 88.145929][ T4363] bridge_slave_1: left allmulticast mode [ 88.151637][ T4363] bridge_slave_1: left promiscuous mode [ 88.157294][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.166591][ T4363] bridge_slave_0: left promiscuous mode [ 88.172370][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.372352][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.443695][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.467162][ T4363] bond0 (unregistering): Released all slaves [ 88.486391][ T4363] bond1 (unregistering): (slave veth7): Releasing active interface [ 88.505107][ T4363] bond1 (unregistering): Released all slaves [ 88.675461][ T4363] hsr_slave_0: left promiscuous mode [ 88.684526][ T4363] hsr_slave_1: left promiscuous mode [ 88.829627][T17425] process '/newroot/344/file0' started with executable stack [ 88.849715][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 88.860697][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 88.892625][T17424] syz_tun: entered allmulticast mode [ 88.902797][T17421] syz_tun: left allmulticast mode [ 88.911739][T17431] lo speed is unknown, defaulting to 1000 [ 88.921696][T17391] chnl_net:caif_netlink_parms(): no params data found [ 89.001721][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.008813][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.016149][T17391] bridge_slave_0: entered allmulticast mode [ 89.022792][T17391] bridge_slave_0: entered promiscuous mode [ 89.030099][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.037156][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.044321][T17391] bridge_slave_1: entered allmulticast mode [ 89.050706][T17391] bridge_slave_1: entered promiscuous mode [ 89.083601][T17391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.103539][T17391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.130794][ T4363] IPVS: stop unused estimator thread 0... [ 89.155319][T17391] team0: Port device team_slave_0 added [ 89.162042][T17391] team0: Port device team_slave_1 added [ 89.189510][ T4363] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.200465][T17391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.207394][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.233367][T17391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.244519][T17391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.251465][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.277339][T17391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.288979][ T4363] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.312475][T17391] hsr_slave_0: entered promiscuous mode [ 89.318597][T17391] hsr_slave_1: entered promiscuous mode [ 89.324521][T17391] debugfs: 'hsr0' already exists in 'hsr' [ 89.330279][T17391] Cannot create hsr debugfs directory [ 89.336724][ T4363] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.390587][ T4363] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.411394][T17391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.420057][T17391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.428521][T17391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.437406][T17391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.450760][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457840][T17391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.465146][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.472164][T17391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.500126][ T4363] bridge_slave_1: left allmulticast mode [ 89.505803][ T4363] bridge_slave_1: left promiscuous mode [ 89.511506][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.519618][ T4363] bridge_slave_0: left allmulticast mode [ 89.525360][ T4363] bridge_slave_0: left promiscuous mode [ 89.531207][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.573685][ T4363] team0: Port device geneve1 removed [ 89.651250][ T4363] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 89.660350][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.669739][ T4363] bond0 (unregistering): Released all slaves [ 89.678191][ T4363] bond1 (unregistering): (slave bond2): Releasing backup interface [ 89.686135][ T4363] bond2 (unregistering): left promiscuous mode [ 89.692619][ T4363] bond1 (unregistering): Released all slaves [ 89.700800][ T4363] bond2 (unregistering): Released all slaves [ 89.708707][ T4363] bond3 (unregistering): Released all slaves [ 89.725145][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.734598][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.752515][T17391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.763622][T17391] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.775670][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.782900][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.796823][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.803994][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.823061][T17391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.833508][T17391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.851443][ T4363] hsr_slave_0: left promiscuous mode [ 89.857171][ T4363] hsr_slave_1: left promiscuous mode [ 89.863620][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.871079][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.881200][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.888579][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.898041][ T4363] veth1_macvtap: left promiscuous mode [ 89.903528][ T4363] veth0_macvtap: left promiscuous mode [ 89.909162][ T4363] veth1_vlan: left promiscuous mode [ 89.914457][ T4363] veth0_vlan: left promiscuous mode [ 89.968371][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 90.026337][T17391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.106714][T17391] veth0_vlan: entered promiscuous mode [ 90.114321][T17391] veth1_vlan: entered promiscuous mode [ 90.127112][T17391] veth0_macvtap: entered promiscuous mode [ 90.134510][T17391] veth1_macvtap: entered promiscuous mode [ 90.145075][T17391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.155709][T17391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.165797][ T4392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.174921][ T4392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184929][ T4392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.193955][ T4392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.347912][T17486] lo speed is unknown, defaulting to 1000 [ 90.394640][T17508] loop0: detected capacity change from 0 to 512 [ 90.526980][T17508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.563145][T17508] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.615194][T17517] netlink: 'syz.4.1566': attribute type 21 has an invalid length. [ 90.623231][T17517] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 90.630977][T17517] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1566'. [ 90.691010][T17486] chnl_net:caif_netlink_parms(): no params data found [ 90.740729][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.804109][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.811345][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.818952][T17486] bridge_slave_0: entered allmulticast mode [ 90.826450][T17486] bridge_slave_0: entered promiscuous mode [ 90.834274][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.841485][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.849094][T17486] bridge_slave_1: entered allmulticast mode [ 90.855497][T17486] bridge_slave_1: entered promiscuous mode [ 90.874193][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.884674][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.905378][T17486] team0: Port device team_slave_0 added [ 90.921816][T17486] team0: Port device team_slave_1 added [ 90.964847][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.971835][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.997748][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.249886][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.256974][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.282997][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.294212][T17529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1571'. [ 91.373193][T17486] hsr_slave_0: entered promiscuous mode [ 91.379112][T17486] hsr_slave_1: entered promiscuous mode [ 91.400565][T17486] debugfs: 'hsr0' already exists in 'hsr' [ 91.406302][T17486] Cannot create hsr debugfs directory [ 91.756268][T17486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.772542][T17486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.786086][T17486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.807624][T17486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.849686][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 91.849701][ T29] audit: type=1326 audit(1765653243.420:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 91.933564][ T29] audit: type=1326 audit(1765653243.420:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 91.956864][T17566] loop5: detected capacity change from 0 to 164 [ 91.957127][ T29] audit: type=1326 audit(1765653243.420:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 91.986855][ T29] audit: type=1326 audit(1765653243.420:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 91.988405][T17566] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.010394][ T29] audit: type=1326 audit(1765653243.470:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 92.010420][ T29] audit: type=1326 audit(1765653243.470:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 92.025567][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.119918][ T29] audit: type=1326 audit(1765653243.520:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 92.143474][ T29] audit: type=1326 audit(1765653243.520:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2704faf783 code=0x7ffc0000 [ 92.167010][ T29] audit: type=1326 audit(1765653243.520:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2704fae1ff code=0x7ffc0000 [ 92.190856][ T29] audit: type=1326 audit(1765653243.520:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2704faf7d7 code=0x7ffc0000 [ 92.215288][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.225033][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.232229][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.243506][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.250654][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.309463][T17585] syz.5.1592: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 92.324018][T17585] CPU: 0 UID: 0 PID: 17585 Comm: syz.5.1592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.324099][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.324113][T17585] Call Trace: [ 92.324121][T17585] [ 92.324169][T17585] __dump_stack+0x1d/0x30 [ 92.324196][T17585] dump_stack_lvl+0xe8/0x140 [ 92.324222][T17585] dump_stack+0x15/0x1b [ 92.324306][T17585] warn_alloc+0x12b/0x1a0 [ 92.324332][T17585] ? __schedule+0x85f/0xcd0 [ 92.324359][T17585] ? __rcu_read_unlock+0x4f/0x70 [ 92.324402][T17585] __vmalloc_node_range_noprof+0xa0/0x1310 [ 92.324474][T17585] ? __futex_wait+0x1fa/0x260 [ 92.324497][T17585] ? __pfx_futex_wake_mark+0x10/0x10 [ 92.324519][T17585] ? __rcu_read_unlock+0x4f/0x70 [ 92.324541][T17585] ? avc_has_perm_noaudit+0xab/0x130 [ 92.324643][T17585] ? should_fail_ex+0x30/0x280 [ 92.324720][T17585] ? should_failslab+0x8c/0xb0 [ 92.324743][T17585] vmalloc_user_noprof+0x7d/0xb0 [ 92.324770][T17585] ? xskq_create+0x80/0xe0 [ 92.324804][T17585] xskq_create+0x80/0xe0 [ 92.324865][T17585] xsk_init_queue+0x95/0xf0 [ 92.324897][T17585] xsk_setsockopt+0x477/0x640 [ 92.324929][T17585] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.325147][T17585] __sys_setsockopt+0x184/0x200 [ 92.325199][T17585] __x64_sys_setsockopt+0x64/0x80 [ 92.325229][T17585] x64_sys_call+0x21d5/0x3000 [ 92.325268][T17585] do_syscall_64+0xd8/0x2a0 [ 92.325306][T17585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.325371][T17585] RIP: 0033:0x7f2704faf749 [ 92.325404][T17585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.325425][T17585] RSP: 002b:00007f2703a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.325446][T17585] RAX: ffffffffffffffda RBX: 00007f2705205fa0 RCX: 00007f2704faf749 [ 92.325460][T17585] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 92.325483][T17585] RBP: 00007f2705033f91 R08: 0000000000000004 R09: 0000000000000000 [ 92.325496][T17585] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 92.325510][T17585] R13: 00007f2705206038 R14: 00007f2705205fa0 R15: 00007ffe0b0abc68 [ 92.325569][T17585] [ 92.325604][T17585] Mem-Info: [ 92.545853][T17585] active_anon:3662 inactive_anon:2 isolated_anon:15 [ 92.545853][T17585] active_file:20514 inactive_file:2344 isolated_file:0 [ 92.545853][T17585] unevictable:16907 dirty:124 writeback:0 [ 92.545853][T17585] slab_reclaimable:3478 slab_unreclaimable:67182 [ 92.545853][T17585] mapped:28866 shmem:299 pagetables:1024 [ 92.545853][T17585] sec_pagetables:0 bounce:0 [ 92.545853][T17585] kernel_misc_reclaimable:0 [ 92.545853][T17585] free:1817835 free_pcp:9426 free_cma:0 [ 92.591163][T17585] Node 0 active_anon:14532kB inactive_anon:8kB active_file:82056kB inactive_file:9376kB unevictable:67628kB isolated(anon):60kB isolated(file):0kB mapped:115464kB dirty:496kB writeback:0kB shmem:1196kB kernel_stack:4608kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.622000][T17585] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.651674][T17585] lowmem_reserve[]: 0 2880 7859 7859 [ 92.657177][T17585] Node 0 DMA32 free:2945972kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 92.688635][T17585] lowmem_reserve[]: 0 0 4978 4978 [ 92.693728][T17585] Node 0 Normal free:4310008kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14532kB inactive_anon:8kB active_file:82056kB inactive_file:9376kB unevictable:67628kB writepending:496kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:33812kB local_pcp:9336kB free_cma:0kB [ 92.705228][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.727061][T17585] lowmem_reserve[]: 0 0 0 0 [ 92.727092][T17585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.751237][T17585] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945972kB [ 92.767413][T17585] Node 0 Normal: 1075*4kB (UM) 697*8kB (UM) 337*16kB (UME) 224*32kB (UME) 183*64kB (UME) 103*128kB (UME) 151*256kB (UME) 108*512kB (UME) 69*1024kB (U) 49*2048kB (UE) 976*4096kB (UM) = 4309988kB [ 92.786684][T17585] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 92.796004][T17585] 40073 total pagecache pages [ 92.800701][T17585] 17 pages in swap cache [ 92.804939][T17585] Free swap = 124900kB [ 92.809085][T17585] Total swap = 124996kB [ 92.813696][T17585] 2097051 pages RAM [ 92.817503][T17585] 0 pages HighMem/MovableOnly [ 92.822247][T17585] 81276 pages reserved [ 92.898978][T17486] veth0_vlan: entered promiscuous mode [ 92.911196][T17613] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1598'. [ 92.915471][T17486] veth1_vlan: entered promiscuous mode [ 92.934831][T17486] veth0_macvtap: entered promiscuous mode [ 92.954448][T17486] veth1_macvtap: entered promiscuous mode [ 92.966842][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.978202][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 92.986057][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.998298][T17620] loop5: detected capacity change from 0 to 128 [ 93.015812][T17620] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.030816][ T4392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.030849][T17620] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.073136][ T4357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.098981][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1604'. [ 93.103957][ T4357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.137976][ T4357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167169][T17633] wireguard0: entered promiscuous mode [ 93.172696][T17633] wireguard0: entered allmulticast mode [ 93.193565][T17391] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.225358][T17643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17643 comm=syz.3.1612 [ 93.352624][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 93.361891][ T4467] Process accounting resumed [ 93.393599][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 93.654389][T17682] loop0: detected capacity change from 0 to 1024 [ 93.712516][T17682] EXT4-fs: Ignoring removed bh option [ 93.743346][T17682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.821828][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.848224][T17701] bridge: RTM_NEWNEIGH with invalid ether address [ 93.915770][T17710] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 94.020944][T17726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'. [ 94.090039][T17733] lo speed is unknown, defaulting to 1000 [ 94.586478][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 94.787131][T17799] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 94.797415][T17799] team0: Failed to send options change via netlink (err -105) [ 94.805020][T17799] team0: Port device dummy0 added [ 94.819851][T17799] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 94.828480][T17799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.849803][T17799] team0: Failed to send options change via netlink (err -105) [ 94.864872][T17799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.875645][T17799] team0: Port device dummy0 removed [ 94.905562][T17799] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.289586][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 97.241156][T17959] __nla_validate_parse: 1 callbacks suppressed [ 97.241168][T17959] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1741'. [ 97.256643][T17959] unsupported nla_type 55437 [ 97.274064][T17962] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1742'. [ 97.505964][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 97.505978][ T29] audit: type=1326 audit(1765653249.070:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17976 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 97.535939][ T29] audit: type=1326 audit(1765653249.070:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17976 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 97.559522][ T29] audit: type=1326 audit(1765653249.070:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17976 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0590f749 code=0x7ffc0000 [ 97.622714][ T29] audit: type=1326 audit(1765653249.190:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.646373][ T29] audit: type=1326 audit(1765653249.190:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.670044][ T29] audit: type=1326 audit(1765653249.190:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.693510][ T29] audit: type=1326 audit(1765653249.190:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.717230][ T29] audit: type=1326 audit(1765653249.190:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.741303][ T29] audit: type=1326 audit(1765653249.190:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.764785][ T29] audit: type=1326 audit(1765653249.190:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.5.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2704faf749 code=0x7ffc0000 [ 97.973924][T18000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.718116][T18087] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1778'. [ 98.738777][T18087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.762635][T18087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.773676][T18087] bond0 (unregistering): Released all slaves [ 99.124851][T18131] dvmrp0: entered allmulticast mode [ 99.676450][T18174] ip6t_srh: unknown srh match flags 4000 [ 99.698357][ T4536] hid_parser_main: 8 callbacks suppressed [ 99.698374][ T4536] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.713027][T18203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.722290][ T4536] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.732394][T18203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.343987][T18248] loop5: detected capacity change from 0 to 512 [ 100.384685][T18248] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1810: bg 0: block 393: padding at end of block bitmap is not set [ 100.419383][T18248] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 100.441968][T18248] EXT4-fs (loop5): 2 truncates cleaned up [ 100.467618][T18248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.561150][T18260] lo speed is unknown, defaulting to 1000 [ 100.589383][T18248] loop5: detected capacity change from 512 to 0 [ 100.595744][ C1] I/O error, dev loop5, sector 18 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 100.605536][ C1] Buffer I/O error on dev loop5, logical block 9, lost sync page write [ 100.614131][T18269] EXT4-fs error (device loop5): ext4_write_inode:5729: inode #18: block 9: comm syz.5.1810: IO error syncing inode [ 100.627092][T18269] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.636097][T18269] EXT4-fs (loop5): I/O error while writing superblock [ 100.665838][T17391] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 100.694222][T17391] EXT4-fs error (device loop5): ext4_get_inode_loc:4968: inode #2: block 5: comm syz-executor: unable to read itable block [ 100.722819][T17391] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.733124][T17391] EXT4-fs (loop5): I/O error while writing superblock [ 100.739923][T17391] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: IO failure [ 100.760446][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 100.778980][T17391] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.793582][T17391] EXT4-fs (loop5): I/O error while writing superblock [ 100.800576][T17391] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 100.812189][T17391] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.820504][T17391] EXT4-fs (loop5): I/O error while writing superblock [ 100.835570][ T4365] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:24: unable to read itable block [ 100.849672][ T4365] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.857910][ T4365] EXT4-fs (loop5): I/O error while writing superblock [ 100.865816][T17391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.875528][T17391] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 100.884013][T17391] EXT4-fs (loop5): I/O error while writing superblock [ 101.077047][T18283] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 101.239810][T18289] lo speed is unknown, defaulting to 1000 [ 101.283053][ T4365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.345499][ T4365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.376004][T18289] chnl_net:caif_netlink_parms(): no params data found [ 101.422545][ T4365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.455731][T18289] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.462873][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.470037][T18289] bridge_slave_0: entered allmulticast mode [ 101.476265][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 101.476633][T18289] bridge_slave_0: entered promiscuous mode [ 101.494663][ T4365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.510136][T18289] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.517333][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.524641][T18289] bridge_slave_1: entered allmulticast mode [ 101.531158][T18289] bridge_slave_1: entered promiscuous mode [ 101.548844][T18289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.559023][T18289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.579663][T18289] team0: Port device team_slave_0 added [ 101.586410][T18289] team0: Port device team_slave_1 added [ 101.605533][T18289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.612560][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.638547][T18289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.654707][T18289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.661684][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.662304][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 101.687638][T18289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.701913][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 101.713635][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.721345][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.730620][ T4365] bridge_slave_1: left allmulticast mode [ 101.736268][ T4365] bridge_slave_1: left promiscuous mode [ 101.742048][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.742176][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 101.755537][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.763069][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.770667][ T4365] bridge_slave_0: left allmulticast mode [ 101.776338][ T4365] bridge_slave_0: left promiscuous mode [ 101.780132][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 101.782211][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.788508][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 101.803193][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.849364][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 101.855889][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.863470][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.871025][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 101.877615][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.885193][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.897732][T18326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.907931][T18289] hsr_slave_0: entered promiscuous mode [ 101.914025][T18289] hsr_slave_1: entered promiscuous mode [ 101.917117][T18342] loop0: detected capacity change from 0 to 164 [ 101.919962][T18289] debugfs: 'hsr0' already exists in 'hsr' [ 101.931562][T18289] Cannot create hsr debugfs directory [ 101.931706][T18342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.946921][T18326] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 101.953593][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 101.959428][T18342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.961244][T18326] vhci_hcd vhci_hcd.0: Device attached [ 101.970825][T18342] rock: directory entry would overflow storage [ 101.974781][ T9] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 101.980936][T18342] rock: sig=0x4f50, size=4, remaining=3 [ 101.980952][T18342] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 102.001859][T18346] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 102.008501][T18346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.016029][T18346] vhci_hcd vhci_hcd.0: Device attached [ 102.043519][T18326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.068473][T18347] vhci_hcd: connection closed [ 102.068670][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.078639][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.079470][T18337] vhci_hcd: connection closed [ 102.084080][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.084430][T18331] vhci_hcd: connection closed [ 102.088985][T18344] vhci_hcd: connection closed [ 102.094698][T18327] vhci_hcd: connection reset by peer [ 102.099464][T18329] vhci_hcd: connection closed [ 102.104222][T18339] vhci_hcd: connection closed [ 102.121457][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.131363][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.136748][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.143398][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.148698][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.154166][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.163112][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.168328][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.173835][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.179814][ T4365] hsr_slave_0: left promiscuous mode [ 102.179820][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.179905][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.195680][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.201394][ T4365] hsr_slave_1: left promiscuous mode [ 102.201623][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.207079][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.211937][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.211962][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.230652][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.230811][ T4357] vhci_hcd vhci_hcd.2: stop threads [ 102.243020][ T4357] vhci_hcd vhci_hcd.2: release socket [ 102.248380][ T4357] vhci_hcd vhci_hcd.2: disconnect device [ 102.254402][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.261861][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.272043][ T4365] veth1_macvtap: left promiscuous mode [ 102.277520][ T4365] veth0_macvtap: left promiscuous mode [ 102.283122][ T4365] veth1_vlan: left promiscuous mode [ 102.288427][ T4365] veth0_vlan: left promiscuous mode [ 102.351289][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 102.360791][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 102.407593][T18358] lo speed is unknown, defaulting to 1000 [ 102.412289][T18289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.422263][T18289] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.431027][T18289] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.444285][T18289] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.488405][T18289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.513180][T18289] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.523373][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.530467][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.541873][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.548935][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.609955][T18289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.746166][T18289] veth0_vlan: entered promiscuous mode [ 102.766579][T18289] veth1_vlan: entered promiscuous mode [ 102.808853][T18289] veth0_macvtap: entered promiscuous mode [ 102.838261][T18289] veth1_macvtap: entered promiscuous mode [ 102.858832][T18289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.874508][T18289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.886712][ T4377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.903235][ T4377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.924409][ T4377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.936082][ T4377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.968663][T18392] loop6: detected capacity change from 0 to 1024 [ 102.976637][T18392] EXT4-fs: Ignoring removed orlov option [ 102.988864][T18392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.014116][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 103.014131][ T29] audit: type=1326 audit(1765653254.580:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.046112][ T29] audit: type=1326 audit(1765653254.580:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.069728][ T29] audit: type=1326 audit(1765653254.580:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.093295][ T29] audit: type=1326 audit(1765653254.580:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.116956][ T29] audit: type=1326 audit(1765653254.580:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.140551][ T29] audit: type=1326 audit(1765653254.580:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.164121][ T29] audit: type=1326 audit(1765653254.580:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.187841][ T29] audit: type=1326 audit(1765653254.580:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.211329][ T29] audit: type=1326 audit(1765653254.580:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.234796][ T29] audit: type=1326 audit(1765653254.580:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d594f749 code=0x7ffc0000 [ 103.281263][T18289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.272699][T18536] loop0: detected capacity change from 0 to 128 [ 104.451207][T18556] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1878'. [ 104.463645][T18556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.480457][T18556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.521961][T18556] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 104.543358][T18556] bond0 (unregistering): Released all slaves [ 104.880278][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1895'. [ 104.898931][T18637] IPVS: Error connecting to the multicast addr [ 104.956013][T18641] ================================================================== [ 104.964106][T18641] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 104.973805][T18641] [ 104.976107][T18641] write to 0xffff88811be55200 of 8 bytes by task 18638 on cpu 1: [ 104.983795][T18641] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 104.989671][T18641] page_pool_alloc_pages+0xd0/0x130 [ 104.994875][T18641] bpf_test_run_xdp_live+0x54d/0x11d0 [ 105.000229][T18641] bpf_prog_test_run_xdp+0x525/0x970 [ 105.005535][T18641] bpf_prog_test_run+0x22a/0x390 [ 105.010453][T18641] __sys_bpf+0x4c0/0x7c0 [ 105.014681][T18641] __x64_sys_bpf+0x41/0x50 [ 105.019075][T18641] x64_sys_call+0x28e1/0x3000 [ 105.023730][T18641] do_syscall_64+0xd8/0x2a0 [ 105.028216][T18641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.034085][T18641] [ 105.036385][T18641] read to 0xffff88811be55200 of 8 bytes by task 18641 on cpu 0: [ 105.043987][T18641] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 105.049866][T18641] napi_pp_put_page+0xe9/0x200 [ 105.054622][T18641] skb_free_head+0x12c/0x150 [ 105.059191][T18641] skb_release_data+0x33b/0x370 [ 105.064030][T18641] __kfree_skb+0x44/0x150 [ 105.068336][T18641] sk_skb_reason_drop+0xbd/0x270 [ 105.073249][T18641] udpv6_recvmsg+0x1f7/0xca0 [ 105.077820][T18641] inet6_recvmsg+0x143/0x290 [ 105.082477][T18641] sock_recvmsg+0x95/0x170 [ 105.086869][T18641] sock_read_iter+0x152/0x1a0 [ 105.091531][T18641] vfs_read+0x64c/0x770 [ 105.095672][T18641] ksys_read+0xda/0x1a0 [ 105.099807][T18641] __x64_sys_read+0x40/0x50 [ 105.104292][T18641] x64_sys_call+0x2889/0x3000 [ 105.108943][T18641] do_syscall_64+0xd8/0x2a0 [ 105.113431][T18641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.119309][T18641] [ 105.121611][T18641] value changed: 0xffffea00048fd040 -> 0x0000000000000000 [ 105.128687][T18641] [ 105.130988][T18641] Reported by Kernel Concurrency Sanitizer on: [ 105.137116][T18641] CPU: 0 UID: 0 PID: 18641 Comm: syz.3.1894 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.146892][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 105.156929][T18641] ================================================================== [ 105.664919][ T4375] team0: Port device geneve1 removed [ 105.831341][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.840898][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.850470][ T4375] bond0 (unregistering): Released all slaves [ 105.858457][ T4375] bond1 (unregistering): (slave veth5): Releasing active interface [ 105.866794][ T4375] bond1 (unregistering): Released all slaves [ 105.900882][ T4375] tipc: Left network mode [ 105.930902][ T4375] hsr_slave_0: left promiscuous mode [ 105.936449][ T4375] hsr_slave_1: left promiscuous mode [ 105.962453][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 105.971517][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 105.998183][ T4357] smc: removing ib device syz1 [ 106.482894][ T4375] dvmrp0 (unregistering): left allmulticast mode [ 106.490400][ T4375] team0: Port device geneve1 removed [ 106.610881][ T4375] bond1 (unregistering): (slave veth3): Releasing active interface [ 106.619301][ T4375] bond1 (unregistering): Released all slaves [ 106.627131][ T4375] bond2 (unregistering): Released all slaves [ 106.695109][ T4375] hsr_slave_0: left promiscuous mode [ 106.700798][ T4375] hsr_slave_1: left promiscuous mode [ 106.734345][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 106.744135][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 106.751634][ T4365] smc: removing ib device !yz! [ 107.052165][ T4375] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.091761][ T4375] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.141908][ T4375] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.152197][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 107.201735][ T4375] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.252004][ T4375] bridge_slave_1: left allmulticast mode [ 107.257635][ T4375] bridge_slave_1: left promiscuous mode [ 107.263305][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.270965][ T4375] bridge_slave_0: left allmulticast mode [ 107.276629][ T4375] bridge_slave_0: left promiscuous mode [ 107.282258][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.351711][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.361621][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.370827][ T4375] bond0 (unregistering): Released all slaves [ 107.412565][ T4375] hsr_slave_0: left promiscuous mode [ 107.418107][ T4375] hsr_slave_1: left promiscuous mode [ 107.423663][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.431086][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.438579][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.446191][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.455931][ T4375] veth1_macvtap: left promiscuous mode [ 107.461489][ T4375] veth0_macvtap: left promiscuous mode [ 107.466995][ T4375] veth1_vlan: left promiscuous mode [ 107.472349][ T4375] veth0_vlan: left promiscuous mode [ 107.524570][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 107.536344][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 109.012569][ T4375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.072214][ T4375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.121379][ T4375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.191480][ T4375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.271027][ T4375] bridge_slave_1: left allmulticast mode [ 109.276660][ T4375] bridge_slave_1: left promiscuous mode [ 109.282319][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.290159][ T4375] bridge_slave_0: left allmulticast mode [ 109.295782][ T4375] bridge_slave_0: left promiscuous mode [ 109.301421][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.381593][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.391353][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.400549][ T4375] bond0 (unregistering): Released all slaves [ 109.442665][ T4375] hsr_slave_0: left promiscuous mode [ 109.448250][ T4375] hsr_slave_1: left promiscuous mode [ 109.453752][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.461115][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.468505][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.475888][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.485577][ T4375] veth1_macvtap: left promiscuous mode [ 109.491049][ T4375] veth0_macvtap: left promiscuous mode [ 109.496695][ T4375] veth1_vlan: left promiscuous mode [ 109.501955][ T4375] veth0_vlan: left promiscuous mode [ 109.557119][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 109.566314][ T4375] team0 (unregistering): Port device team_slave_0 removed