last executing test programs: 1m1.636696549s ago: executing program 4 (id=380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x800}}], 0x1, 0x0) recvmsg(r1, 0x0, 0x20) 1m1.581751646s ago: executing program 4 (id=381): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x20000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x45, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r4, 0xffffffffffffffff, 0xa00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1m1.581493836s ago: executing program 4 (id=382): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='thermal_power_cpu_get_power\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$eJzs3M1vG0UbAPBn7aR9+5m8VfloWiBQEBEfSZOW0gMXEEgcQEKCQzmGJK1C3QY1RqJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYWT0drexHbsNHGdLNS/n7TtzO44M493x57ZySaAvjWa/pNE7I+I3yJiqJZtLjBa++/2ytLMXytLM0lUKm/+mVTL3VpZmsmKZq/bl2UGIgqfJnG0Tb2LV65emC6V5i7X8xPli+9NLF65+uz8xenzc+fnLk2dOXPq5OTzp6ee60mcaVy3Rj5cOHbk1bevvz5z9vo7P32TZPG3xNEjoxsdfKJS6XF1+TrQkE4GcmwIW1KsddMYrPb/oSjG2skbilc+aShaPphLC4HtUqlUKvd3PrxcAe5hSeTdAiAf2Rd9Ov/Ntogo7NDwI3c3X6xNgNK4b9e32pGB1TdhsGV+20ujEXF2+e8v0y225z4EAECT79LxzzPrxn/VIWDjfaGD9TWU4Yj4f0QciojTEXE4Iu6LqJZ9ICIe3GL9rYsk68c/hRtdBbZJ6fjvhfraVvP4b3UIPFys5w5U4x9Mzs2X5k7U35OxGNyd5ic3qOP7l3/9vNOxxvFfuqX1Z2PBejtuDOxufs3sdHn6bmJudPPjiJGBdvEnqysBSUQciYiRLuuYf+rrY52O3Tn+DfRgnanyVcSTtfO/HC3xZ5KN1ycn/heluRMT2VWx3s+/XHujU/13FX8PpOd/b9vrfzX+4aRxvXZx63Vc+/2zjnOabq//XclbTfs+mC6XL09G7EpeqzW6cf9US7mptfJp/GPH2/f/Q7H2ThyNiPQifigiHo6IR+ptfzQiHouI4xvE/+NLj7/bffzbK41/dkvnfy2xK1r3tE8UL/zwbVOlw1uJPz3/p6qpsfqezXz+baZd3V3NAAAA8N9TiIj9kRTGV9OFwvh47Xf4D8feQmlhsfz0uYX3L83WnhEYjsFCdqdrqOF+6GR9Wp/lp1ryJ+v3jb8o7qnmx2cWSrN5Bw99bl+H/p/6o5h364Bt53kt6F/6P/Qv/R/6l/4P/atN/9+TRzuAndfu+/+jHNoB7LyW/m/ZD/qI+T/0r276f9/8hSC4x/n+h760uCfu/JC8hMS6RBT+Fc2QSBPZcLyHPznvTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//Fmvj5w==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 1m1.565329388s ago: executing program 4 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x2, 0x0, 0x20000025}) 1m0.471417379s ago: executing program 4 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r1, &(0x7f0000000240)={[0x1]}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) linkat(r8, &(0x7f0000000240)='./file1\x00', r8, &(0x7f0000000280)='./file1/file0\x00', 0x1400) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r9, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r10}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x40, 0x40, 0x10, 0x1, {{0x6, 0x4, 0x0, 0xd, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @loopback, {[@end]}}}}}) syz_open_dev$vcsa(&(0x7f0000000640), 0x7, 0x80000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r8, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/18, 0x12, 0x0, &(0x7f0000000380)=""/174, 0xae}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000500)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f0000000140)='GPL\x00', 0x8, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x1, '\x00', r11, @fallback=0x8, r9, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x8, 0x99a, 0x39128265}, 0x10, r12, r8, 0x0, &(0x7f00000004c0)=[r10], &(0x7f0000000580), 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x1a, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x4, 0xa, 0x50, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r5}]}, &(0x7f0000000280)='GPL\x00', 0xd, 0x67, &(0x7f00000002c0)=""/103, 0x40f00, 0x500b2842885676a2, '\x00', r7, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x1, 0x9}, 0x10, r12, r0, 0x0, 0x0, 0x0, 0x10, 0xffffff08}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r1], 0x38}}, 0x0) 1m0.359493253s ago: executing program 4 (id=397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 45.332842329s ago: executing program 32 (id=397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 5.634698334s ago: executing program 0 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x4, 0x7, 0xad, 0x81, 0x41, @remote, @local, 0x20, 0x7, 0x7, 0x78}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") 5.279257129s ago: executing program 0 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 5.138882537s ago: executing program 0 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x4, 0x7, 0xad, 0x81, 0x41, @remote, @local, 0x20, 0x7, 0x7, 0x78}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.046658226s ago: executing program 2 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="aa523b7fdd", 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 1.976395485s ago: executing program 2 (id=1166): syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61bc4a2600442f00fe8000000000000000000000000000aafe8000000000000000000000000000aa0c2088be0000000101000800000086dd0800"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 1.913355293s ago: executing program 2 (id=1168): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2d3, &(0x7f0000000b80)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000046d1abd600"/24, @ANYRES32, @ANYBLOB="0000000000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") r1 = inotify_init1(0x80800) inotify_add_watch(r1, 0x0, 0x2000775) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000140001800600010002000a0008000300ac1414aa"], 0x28}}, 0x10) 1.846378461s ago: executing program 2 (id=1169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xf41}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xc, 0x4}) 1.815297275s ago: executing program 2 (id=1170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000006c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x172, 0x7, 0xaae, 0x668c2fbe5721820, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xd}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, r2, 0x2, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x3, 0x0, {"0e000000000000000000000004000001"}, 0x0, 0x0, 0xfffffffffffffffc}}}, 0x118) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x820c}}, './file0\x00'}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 1.77870146s ago: executing program 2 (id=1171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000002d40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffc01, @local, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x20000040) 1.678150253s ago: executing program 3 (id=1172): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 1.662491315s ago: executing program 3 (id=1173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000300)=""/157) getdents64(0xffffffffffffffff, 0x0, 0xfb) truncate(&(0x7f0000000140)='./file0\x00', 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r2, 0x8934, &(0x7f00000003c0)={'veth1_to_bond\x00', @ifru_mtu=0xffffffbc}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'pimreg\x00', {0x2, 0x0, @multicast1}}) timer_create(0x3, &(0x7f0000000240)={0x0, 0x3b, 0x4}, &(0x7f0000000280)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) 1.642161728s ago: executing program 3 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000001e000500040000ede969a16d00948282f800fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0xe9, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) clock_adjtime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 849.8303ms ago: executing program 5 (id=1182): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) socket$netlink(0x10, 0x3, 0x1) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000c000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1205cb8, &(0x7f0000000b80)={[{@errors_remount}, {@discard}, {@journal_async_commit}, {@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@dax_inode}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") 753.616112ms ago: executing program 3 (id=1183): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 733.423675ms ago: executing program 3 (id=1184): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 716.275107ms ago: executing program 3 (id=1185): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x2, 0x0, 0x20000025}) 640.144567ms ago: executing program 5 (id=1186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000240)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) sendmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(r7, r7) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x7, 0x2550, 0xfffffffe, 0xfffffff8, 0x14, "0c7a08dc8a83bc28b20f69b129a7511bdfd103"}) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) getpriority(0x0, 0xffffffffffffffff) 589.330424ms ago: executing program 5 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="aa523b7fdd", 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 564.481457ms ago: executing program 0 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 547.672569ms ago: executing program 5 (id=1189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000300)=""/157) getdents64(0xffffffffffffffff, 0x0, 0xfb) truncate(&(0x7f0000000140)='./file0\x00', 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r2, 0x8934, &(0x7f00000003c0)={'veth1_to_bond\x00', @ifru_mtu=0xffffffbc}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'pimreg\x00', {0x2, 0x0, @multicast1}}) timer_create(0x3, &(0x7f0000000240)={0x0, 0x3b, 0x4}, &(0x7f0000000280)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) 458.076571ms ago: executing program 0 (id=1191): unshare(0x6a040000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) symlink(0x0, &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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") r4 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r4, 0x0, 0x9, 0x2000403) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 426.015765ms ago: executing program 5 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500"], 0x4c}}, 0x0) 357.949673ms ago: executing program 5 (id=1193): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000001e000500040000ede969a16d00948282f800fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0xe9, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) clock_adjtime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 340.955965ms ago: executing program 1 (id=1194): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 257.212796ms ago: executing program 1 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 211.759662ms ago: executing program 1 (id=1196): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001100050000f9fffffdffffff07000000", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 176.965926ms ago: executing program 1 (id=1197): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 134.154622ms ago: executing program 0 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x4, 0x7, 0xad, 0x81, 0x41, @remote, @local, 0x20, 0x7, 0x7, 0x78}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 130.231023ms ago: executing program 1 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)="aa523b7fdd", 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 0s ago: executing program 1 (id=1200): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xf, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000001000000000000002e76b33801cfcb953d14a36e112d0d250a472001dad01aec0d40c020276859381ffeafa3d9b7ff0eef", @ANYBLOB="3bfa7d4ea5eb903cd64a86b6a47ee0eccd5d8ec693f3ffa9e694e208cb7a807d33b808af580917a67f28dae6fc7f8692a7e727a170fa2841", @ANYBLOB='\x00\x00\x00', @ANYRESDEC=r2, @ANYRESDEC=r0, @ANYBLOB="7dc941fde45cbf7bf9a1b9395d17775628862b80ef91179e2acb93909528cd56a17ea452a4d294c337184bc215ea776c0a98b9657810a8a4efa18b0f750f09962fb6071753b352391a3c284f80e37228d168e176fdc3d5ff44dc7c44ae81807a94c3949d67adc10152922050e3a47a4c3443e12f26334adf350d9966a5836928"], 0x48) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) kernel console output (not intermixed with test programs): m 0 to 1024 [ 76.810247][ T2449] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.811524][ T5541] loop5: detected capacity change from 0 to 512 [ 76.829467][ T5537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.841790][ T5541] EXT4-fs: Ignoring removed oldalloc option [ 76.847924][ T5541] EXT4-fs: inline encryption not supported [ 76.852501][ T2449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.869813][ T5541] journal_path: Lookup failure for './file0' [ 76.875918][ T5541] EXT4-fs: error: could not find journal device path [ 76.884727][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.913676][ T2449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940141][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.951398][ T5535] can0 (unregistered): slcan off ttyS3. [ 77.024476][ T5553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5553 comm=syz.3.632 [ 77.084342][ T5557] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 77.120145][ T5566] loop3: detected capacity change from 0 to 512 [ 77.120668][ T5545] can0: slcan on ttyS3. [ 77.150189][ T5566] EXT4-fs: Ignoring removed oldalloc option [ 77.150305][ T5566] EXT4-fs: inline encryption not supported [ 77.150393][ T5566] journal_path: Lookup failure for './file0' [ 77.150409][ T5566] EXT4-fs: error: could not find journal device path [ 77.171342][ T5569] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 77.228374][ T5557] bond0: (slave dummy0): Releasing backup interface [ 77.252835][ T5557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.264192][ T5557] team0: Failed to send options change via netlink (err -105) [ 77.270035][ T5574] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 77.272691][ T5557] team0: Port device dummy0 added [ 77.285356][ T5569] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.305441][ T5569] team0: Failed to send options change via netlink (err -105) [ 77.315197][ T5569] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.325557][ T5577] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 77.325695][ T5569] team0: Port device dummy0 removed [ 77.340241][ T5569] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.383230][ T5574] team0: Failed to send options change via netlink (err -105) [ 77.390753][ T5574] team0: Port device ªªªªªª added [ 77.411502][ T5561] can0 (unregistered): slcan off ttyS3. [ 77.454100][ T5577] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 77.517161][ T5585] netlink: 'syz.5.640': attribute type 32 has an invalid length. [ 77.525874][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 77.535110][ T5577] team0: Failed to send options change via netlink (err -105) [ 77.545580][ T5577] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 77.559055][ T5577] team0: Port device ªªªªªª removed [ 77.567309][ T5577] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 77.620806][ T5595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.627940][ T5595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.648733][ T5588] tipc: Started in network mode [ 77.653753][ T5588] tipc: Node identity ac14140f, cluster identity 4711 [ 77.685567][ T5588] tipc: New replicast peer: 255.255.255.83 [ 77.691509][ T5588] tipc: Enabled bearer , priority 10 [ 77.700558][ T3487] hid_parser_main: 44 callbacks suppressed [ 77.700573][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.714771][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.722240][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.729615][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.737053][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.745263][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.752663][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.760121][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.767521][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.775730][ T3487] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 77.806852][ T5595] EXT4-fs (loop2): 1 truncate cleaned up [ 77.814199][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.838705][ T5594] netlink: 'syz.0.639': attribute type 2 has an invalid length. [ 77.847252][ T5594] netlink: 'syz.0.639': attribute type 2 has an invalid length. [ 77.854968][ T5594] netlink: 264 bytes leftover after parsing attributes in process `syz.0.639'. [ 77.882764][ T5585] bond1: option coupled_control: invalid value (17) [ 77.891436][ T5585] bond1 (unregistering): Released all slaves [ 78.028256][ T5616] EXT4-fs: Ignoring removed oldalloc option [ 78.052338][ T5616] EXT4-fs: inline encryption not supported [ 78.062936][ T5616] journal_path: Lookup failure for './file0' [ 78.068996][ T5616] EXT4-fs: error: could not find journal device path [ 78.084286][ T3487] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 78.164451][ T5617] fido_id[5617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.307382][ T5627] can0: slcan on ttyS3. [ 78.322040][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.402436][ T5627] can0 (unregistered): slcan off ttyS3. [ 78.434869][ T5638] set_capacity_and_notify: 2 callbacks suppressed [ 78.434887][ T5638] loop1: detected capacity change from 0 to 1024 [ 78.525550][ T5638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.567461][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.703336][ T5634] can0: slcan on ttyS3. [ 78.812127][ T5634] can0 (unregistered): slcan off ttyS3. [ 78.826034][ T3487] tipc: Node number set to 2886997007 [ 78.865327][ T5680] loop5: detected capacity change from 0 to 512 [ 78.877180][ T5676] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.936598][ T5676] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.948432][ T5680] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 78.965592][ T5680] EXT4-fs (loop5): mount failed [ 78.979128][ T5688] loop0: detected capacity change from 0 to 1024 [ 78.985683][ T5686] loop2: detected capacity change from 0 to 256 [ 79.000343][ T5686] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.024018][ T5676] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.031530][ T5686] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.063621][ T5688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.090586][ T5691] loop1: detected capacity change from 0 to 512 [ 79.097574][ T5691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.104794][ T5691] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.117663][ T5691] EXT4-fs (loop1): 1 truncate cleaned up [ 79.124260][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.227548][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.341813][ T5676] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.363927][ T510] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.427725][ T5704] loop0: detected capacity change from 0 to 512 [ 79.441269][ T5704] EXT4-fs: Ignoring removed oldalloc option [ 79.448102][ T5704] EXT4-fs: inline encryption not supported [ 79.461433][ T5704] journal_path: Lookup failure for './file0' [ 79.467462][ T5704] EXT4-fs: error: could not find journal device path [ 79.514403][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.668'. [ 79.524690][ T510] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.553059][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.560563][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.568675][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.576308][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.588604][ T510] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.604986][ T510] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.608483][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.613580][ T510] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.636526][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.707864][ T5720] loop5: detected capacity change from 0 to 256 [ 79.714988][ T5720] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.769187][ T5720] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.780703][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.822954][ T5727] loop1: detected capacity change from 0 to 512 [ 79.834943][ T5728] loop2: detected capacity change from 0 to 1024 [ 79.836934][ T5727] EXT4-fs: Ignoring removed bh option [ 79.880389][ T5728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.895822][ T5728] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.908816][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.909671][ T5728] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.675: bg 0: block 112: padding at end of block bitmap is not set [ 79.936804][ T5728] EXT4-fs (loop2): Remounting filesystem read-only [ 79.943803][ T5727] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.981660][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 80.010711][ T5737] loop5: detected capacity change from 0 to 1024 [ 80.017198][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 80.039230][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.053993][ T5737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.071768][ T5742] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 80.092952][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.130072][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 80.139422][ T5746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.146930][ T5746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.149324][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.164439][ T5746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.171894][ T5746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.237133][ T5754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 80.246079][ T5754] netlink: 'syz.1.682': attribute type 7 has an invalid length. [ 80.254647][ T5754] netlink: 'syz.1.682': attribute type 8 has an invalid length. [ 80.262456][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 80.273270][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.356941][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.527081][ T5767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.592690][ T5767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.604456][ T5767] EXT4-fs (loop5): 1 truncate cleaned up [ 80.610936][ T5767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.823983][ T5766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.926982][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.001324][ T29] kauditd_printk_skb: 1533 callbacks suppressed [ 81.001338][ T29] audit: type=1326 audit(1768438364.435:15022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.032482][ T29] audit: type=1326 audit(1768438364.445:15023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.056073][ T29] audit: type=1326 audit(1768438364.475:15024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.079513][ T29] audit: type=1326 audit(1768438364.475:15025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.116974][ T29] audit: type=1326 audit(1768438364.545:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.141332][ T29] audit: type=1326 audit(1768438364.545:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.165517][ T29] audit: type=1326 audit(1768438364.555:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.188914][ T29] audit: type=1326 audit(1768438364.555:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.213131][ T29] audit: type=1326 audit(1768438364.555:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e21ad2005 code=0x7ffc0000 [ 81.236628][ T29] audit: type=1400 audit(1768438364.555:15031): avc: denied { create } for pid=5774 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.323463][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.358222][ T5783] netlink: 'syz.5.697': attribute type 32 has an invalid length. [ 81.366002][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.697'. [ 81.387324][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.395953][ T3616] Bluetooth: hci0: command 0x1003 tx timeout [ 81.395977][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.401777][ T5783] bond1: option coupled_control: invalid value (17) [ 81.412187][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.431578][ T5783] bond1 (unregistering): Released all slaves [ 81.627857][ T5781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.687843][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.743621][ T5788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.800184][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.815372][ T3425] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 81.846114][ T5800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.868160][ T5801] fido_id[5801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.887903][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.929334][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.965384][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.975177][ T5813] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 82.054960][ T5817] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 82.076322][ T5807] can0: slcan on ttyS3. [ 82.088529][ T5817] bond0: (slave ªªªªªª): Releasing backup interface [ 82.101690][ T5817] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 82.110574][ T5817] team0: Failed to send options change via netlink (err -105) [ 82.118820][ T5817] team0: Port device ªªªªªª added [ 82.121077][ T5824] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 82.139385][ T5824] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 82.161163][ T5824] team0: Failed to send options change via netlink (err -105) [ 82.170148][ T5824] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 82.179401][ T5824] team0: Port device ªªªªªª removed [ 82.187884][ T5824] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 82.201332][ T5807] can0 (unregistered): slcan off ttyS3. [ 82.229407][ T4486] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 82.279136][ T5830] fido_id[5830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.330002][ T5838] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.356859][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.375856][ T5838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.390478][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.432437][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.532228][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.578005][ T5878] EXT4-fs: Ignoring removed bh option [ 82.616275][ T5878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.631060][ T5878] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.651712][ T4486] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 82.656350][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 82.672916][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 82.694862][ T5888] fido_id[5888]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.746379][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.755522][ T5887] can0: slcan on ttyS3. [ 82.821632][ T5887] can0 (unregistered): slcan off ttyS3. [ 82.916276][ T5899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.947136][ T5904] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.958317][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.995261][ T5906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.009979][ T5909] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.030429][ T5909] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.042146][ T5904] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.093142][ T5904] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.153405][ T5904] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.179913][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.209865][ T1877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230958][ T1877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244045][ T1877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.252515][ T1877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367938][ T5930] EXT4-fs: Ignoring removed bh option [ 83.388669][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.403813][ T5930] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.431185][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 83.498902][ T5941] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.559212][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.576936][ T5941] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.795228][ T5943] can0: slcan on ttyS3. [ 83.841456][ T5966] set_capacity_and_notify: 18 callbacks suppressed [ 83.841478][ T5966] loop0: detected capacity change from 0 to 512 [ 83.855763][ T5966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.865633][ T5966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.934343][ T5966] EXT4-fs (loop0): 1 truncate cleaned up [ 83.940575][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.959285][ T5943] can0 (unregistered): slcan off ttyS3. [ 84.077168][ T5941] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.217633][ T5941] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.336246][ T5986] netlink: 'syz.3.751': attribute type 32 has an invalid length. [ 84.353010][ T1877] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.369742][ T1877] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.390395][ T5986] bond2: option coupled_control: invalid value (17) [ 84.404763][ T5986] bond2 (unregistering): Released all slaves [ 84.414877][ T1877] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.430005][ T1877] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516908][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.539526][ T5992] loop5: detected capacity change from 0 to 1024 [ 84.595768][ T5992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.645758][ T6010] loop0: detected capacity change from 0 to 128 [ 84.676725][ T6013] loop3: detected capacity change from 0 to 128 [ 84.756254][ T6020] __nla_validate_parse: 2 callbacks suppressed [ 84.756271][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 84.771327][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 84.796160][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.826761][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.882340][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.916509][ T3498] hid_parser_main: 62 callbacks suppressed [ 84.916602][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.930913][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.936727][ T6045] netlink: 'syz.2.764': attribute type 32 has an invalid length. [ 84.938391][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.946942][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 84.954364][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.969640][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.977073][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.985320][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.992749][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 84.993554][ T6045] bond1: option coupled_control: invalid value (17) [ 85.000285][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 85.000360][ T3498] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 85.028999][ T6045] bond1 (unregistering): Released all slaves [ 85.116742][ T3498] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 85.169588][ T6049] fido_id[6049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.205670][ T6047] loop0: detected capacity change from 0 to 1024 [ 85.224096][ T6057] loop1: detected capacity change from 0 to 128 [ 85.629112][ T6059] can0: slcan on ttyS3. [ 85.839105][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.774'. [ 85.848069][ T6131] netlink: 'syz.0.774': attribute type 7 has an invalid length. [ 85.855733][ T6131] netlink: 'syz.0.774': attribute type 8 has an invalid length. [ 85.864127][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 86.015588][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 86.015602][ T29] audit: type=1400 audit(1768438369.455:15571): avc: denied { cpu } for pid=6124 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.095730][ T29] audit: type=1326 audit(1768438369.515:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e21a965e7 code=0x7ffc0000 [ 86.118449][ T29] audit: type=1326 audit(1768438369.515:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e21a3b829 code=0x7ffc0000 [ 86.141850][ T29] audit: type=1326 audit(1768438369.515:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e21a965e7 code=0x7ffc0000 [ 86.164475][ T29] audit: type=1326 audit(1768438369.515:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e21a3b829 code=0x7ffc0000 [ 86.164510][ T6059] can0 (unregistered): slcan off ttyS3. [ 86.187856][ T29] audit: type=1326 audit(1768438369.515:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 86.187965][ T29] audit: type=1326 audit(1768438369.515:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 86.187988][ T29] audit: type=1326 audit(1768438369.515:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 86.262847][ T29] audit: type=1326 audit(1768438369.515:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 86.285750][ T29] audit: type=1326 audit(1768438369.515:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 86.407095][ T6146] can0: slcan on ttyS3. [ 86.503392][ T6146] can0 (unregistered): slcan off ttyS3. [ 86.528119][ T6153] loop2: detected capacity change from 0 to 1024 [ 86.549649][ T6158] loop5: detected capacity change from 0 to 128 [ 86.589237][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.781'. [ 86.649587][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.661016][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.681144][ T6162] macvlan2: entered promiscuous mode [ 86.686604][ T6162] macvlan2: entered allmulticast mode [ 86.695084][ T6162] bond1: (slave macvlan2): Opening slave failed [ 86.706871][ T6166] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.764993][ T6170] loop2: detected capacity change from 0 to 256 [ 86.782316][ T6166] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.790402][ T6169] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 86.803981][ T6170] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.824562][ T6169] bond0: (slave ªªªªªª): Releasing backup interface [ 86.831924][ T6170] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.845716][ T6169] team0: Port device ªªªªªª added [ 86.852296][ T6173] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 86.876435][ T6173] team0: Port device ªªªªªª removed [ 86.884260][ T6173] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 86.906700][ T6166] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.958510][ T6178] netlink: 'syz.3.787': attribute type 32 has an invalid length. [ 86.967216][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 86.992628][ T6178] bond2: option coupled_control: invalid value (17) [ 87.002604][ T6178] bond2 (unregistering): Released all slaves [ 87.025502][ T6166] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.163085][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.181887][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.190578][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.205829][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.340462][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'. [ 87.349527][ T6197] netlink: 'syz.1.792': attribute type 7 has an invalid length. [ 87.357207][ T6197] netlink: 'syz.1.792': attribute type 8 has an invalid length. [ 87.365673][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 87.425417][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 87.435216][ T6200] netlink: 'syz.2.793': attribute type 7 has an invalid length. [ 87.442870][ T6200] netlink: 'syz.2.793': attribute type 8 has an invalid length. [ 87.484059][ T6187] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29109, delta: 1 [ 87.492790][ T6187] ref_ctr increment failed for inode: 0x31c offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811cfa4a40 [ 88.084860][ T6208] loop5: detected capacity change from 0 to 128 [ 88.137203][ T6210] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 88.169669][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.189735][ T6210] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 88.210502][ T6210] team0: Port device dummy0 removed [ 88.215832][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.223430][ T6210] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.300080][ T6218] can0: slcan on ttyS3. [ 88.452311][ T6218] can0 (unregistered): slcan off ttyS3. [ 88.464388][ T6226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.485958][ T6226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.567703][ T6226] EXT4-fs (loop2): 1 truncate cleaned up [ 88.954049][ T6242] set_capacity_and_notify: 2 callbacks suppressed [ 88.954065][ T6242] loop3: detected capacity change from 0 to 128 [ 88.967469][ T6238] can0: slcan on ttyS3. [ 89.073570][ T6238] can0 (unregistered): slcan off ttyS3. [ 89.094536][ T6246] netlink: 'syz.3.809': attribute type 7 has an invalid length. [ 89.173425][ T6248] can0: slcan on ttyS3. [ 89.179198][ T6252] bond1: option coupled_control: invalid value (17) [ 89.187107][ T6252] bond1 (unregistering): Released all slaves [ 89.228968][ T6255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.252016][ T6247] can0 (unregistered): slcan off ttyS3. [ 89.282655][ T6260] loop0: detected capacity change from 0 to 256 [ 89.294240][ T6260] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.306919][ T6255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.317890][ T6260] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.396519][ T6255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.465643][ T6255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.509747][ T6268] FAULT_INJECTION: forcing a failure. [ 89.509747][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.523011][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.5.818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.523091][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.523104][ T6268] Call Trace: [ 89.523175][ T6268] [ 89.523182][ T6268] __dump_stack+0x1d/0x30 [ 89.523205][ T6268] dump_stack_lvl+0x95/0xd0 [ 89.523224][ T6268] dump_stack+0x15/0x1b [ 89.523242][ T6268] should_fail_ex+0x265/0x280 [ 89.523311][ T6268] should_fail+0xb/0x20 [ 89.523328][ T6268] should_fail_usercopy+0x1a/0x20 [ 89.523352][ T6268] _copy_from_user+0x1c/0xb0 [ 89.523424][ T6268] perf_copy_attr+0x145/0x610 [ 89.523440][ T6268] ? get_pid_task+0x96/0xd0 [ 89.523458][ T6268] __se_sys_perf_event_open+0x67/0x1210 [ 89.523534][ T6268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.523611][ T6268] ? vfs_write+0x7e8/0x960 [ 89.523622][ T6268] ? __rcu_read_unlock+0x4f/0x70 [ 89.523638][ T6268] __x64_sys_perf_event_open+0x67/0x80 [ 89.523656][ T6268] x64_sys_call+0x78c/0x3000 [ 89.523746][ T6268] do_syscall_64+0xca/0x2b0 [ 89.523813][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.523827][ T6268] RIP: 0033:0x7f90355df749 [ 89.523837][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.523848][ T6268] RSP: 002b:00007f9034047038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 89.523860][ T6268] RAX: ffffffffffffffda RBX: 00007f9035835fa0 RCX: 00007f90355df749 [ 89.523867][ T6268] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 89.523941][ T6268] RBP: 00007f9034047090 R08: 0000000000000001 R09: 0000000000000000 [ 89.523949][ T6268] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 89.524020][ T6268] R13: 00007f9035836038 R14: 00007f9035835fa0 R15: 00007ffe547b72f8 [ 89.524031][ T6268] [ 89.725175][ T1877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.736717][ T1877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.745094][ T6271] loop5: detected capacity change from 0 to 128 [ 89.758087][ T6110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.771361][ T6110] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823321][ T6277] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 89.891421][ T6281] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 89.900287][ T6284] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.900530][ T6281] FAULT_INJECTION: forcing a failure. [ 89.900530][ T6281] name failslab, interval 1, probability 0, space 0, times 0 [ 89.922790][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.2.821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.922807][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.922815][ T6281] Call Trace: [ 89.922868][ T6281] [ 89.922875][ T6281] __dump_stack+0x1d/0x30 [ 89.922901][ T6281] dump_stack_lvl+0x95/0xd0 [ 89.922995][ T6281] dump_stack+0x15/0x1b [ 89.923007][ T6281] should_fail_ex+0x265/0x280 [ 89.923104][ T6281] should_failslab+0x8c/0xb0 [ 89.923128][ T6281] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 89.923148][ T6281] ? __alloc_skb+0x2ff/0x4b0 [ 89.923201][ T6281] __alloc_skb+0x2ff/0x4b0 [ 89.923214][ T6281] ? __alloc_skb+0x228/0x4b0 [ 89.923228][ T6281] netlink_ack+0xfd/0x500 [ 89.923266][ T6281] netlink_rcv_skb+0x192/0x220 [ 89.923283][ T6281] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.923297][ T6281] rtnetlink_rcv+0x1c/0x30 [ 89.923307][ T6281] netlink_unicast+0x5c0/0x690 [ 89.923374][ T6281] netlink_sendmsg+0x58b/0x6b0 [ 89.923393][ T6281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.923457][ T6281] __sock_sendmsg+0x145/0x180 [ 89.923468][ T6281] ____sys_sendmsg+0x31e/0x4a0 [ 89.923486][ T6281] ___sys_sendmsg+0x17b/0x1d0 [ 89.923568][ T6281] __x64_sys_sendmsg+0xd4/0x160 [ 89.923596][ T6281] x64_sys_call+0x17ba/0x3000 [ 89.923674][ T6281] do_syscall_64+0xca/0x2b0 [ 89.923766][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.923779][ T6281] RIP: 0033:0x7f775b10f749 [ 89.923789][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.923838][ T6281] RSP: 002b:00007f7759b4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.923850][ T6281] RAX: ffffffffffffffda RBX: 00007f775b366090 RCX: 00007f775b10f749 [ 89.923858][ T6281] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 89.923867][ T6281] RBP: 00007f7759b4e090 R08: 0000000000000000 R09: 0000000000000000 [ 89.923930][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.923980][ T6281] R13: 00007f775b366128 R14: 00007f775b366090 R15: 00007fff813f84a8 [ 89.923990][ T6281] [ 89.929573][ T6286] loop0: detected capacity change from 0 to 256 [ 90.153608][ T6286] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.179760][ T6290] bond0: (slave dummy0): Releasing backup interface [ 90.187089][ T6286] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.201397][ T6290] team0: Port device dummy0 added [ 90.222797][ T6293] team0: Port device dummy0 removed [ 90.232838][ T6293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.246406][ T6284] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.287544][ T6295] can0: slcan on ttyS3. [ 90.360433][ T6284] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.401460][ T6295] can0 (unregistered): slcan off ttyS3. [ 90.409213][ T6284] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.442076][ T6299] can0: slcan on ttyS3. [ 90.464275][ T6302] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.517013][ T6303] loop5: detected capacity change from 0 to 256 [ 90.523497][ T6299] can0 (unregistered): slcan off ttyS3. [ 90.530197][ T6303] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.535922][ T6302] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.555356][ T6303] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.588395][ T6307] loop2: detected capacity change from 0 to 128 [ 90.607780][ T6302] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.673446][ T6302] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.693243][ T6310] __nla_validate_parse: 5 callbacks suppressed [ 90.693340][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 90.708507][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 90.737931][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763248][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.772724][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.784988][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.826237][ T6312] can0: slcan on ttyS3. [ 90.880498][ T6312] can0 (unregistered): slcan off ttyS3. [ 91.070970][ T29] kauditd_printk_skb: 1234 callbacks suppressed [ 91.071034][ T29] audit: type=1400 audit(1768438374.505:16813): avc: denied { execute } for pid=6315 comm="syz.3.837" path="/153/file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.108510][ T29] audit: type=1400 audit(1768438374.545:16814): avc: denied { create } for pid=6327 comm="syz.5.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.139395][ T29] audit: type=1400 audit(1768438374.565:16815): avc: denied { getopt } for pid=6327 comm="syz.5.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.170044][ T29] audit: type=1400 audit(1768438374.605:16816): avc: denied { cpu } for pid=6315 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.183105][ T6316] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -24510, delta: 1 [ 91.198700][ T6316] ref_ctr increment failed for inode: 0x34e offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811cf45e80 [ 91.213567][ T6330] loop5: detected capacity change from 0 to 512 [ 91.220132][ T6330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.228425][ T6330] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.241239][ T6330] EXT4-fs (loop5): 1 truncate cleaned up [ 91.247636][ T29] audit: type=1400 audit(1768438374.685:16817): avc: denied { mount } for pid=6327 comm="syz.5.841" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.278629][ T29] audit: type=1326 audit(1768438374.715:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 91.302139][ T29] audit: type=1326 audit(1768438374.715:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 91.326155][ T29] audit: type=1326 audit(1768438374.715:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 91.349587][ T29] audit: type=1326 audit(1768438374.715:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 91.373217][ T29] audit: type=1326 audit(1768438374.715:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 91.500129][ T6335] loop2: detected capacity change from 0 to 512 [ 91.512727][ T6335] EXT4-fs: Ignoring removed bh option [ 91.534610][ T6335] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.552021][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 91.573133][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 91.685624][ T6340] can0: slcan on ttyS3. [ 91.712601][ T6342] loop2: detected capacity change from 0 to 512 [ 91.719409][ T6342] EXT4-fs: Ignoring removed bh option [ 91.732258][ T6340] can0 (unregistered): slcan off ttyS3. [ 91.748289][ T6342] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.811072][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 91.913377][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 91.947795][ T6346] can0: slcan on ttyS3. [ 92.041411][ T6346] can0 (unregistered): slcan off ttyS3. [ 92.077765][ T6361] lo speed is unknown, defaulting to 1000 [ 92.092598][ T6361] lo speed is unknown, defaulting to 1000 [ 92.098823][ T6358] loop3: detected capacity change from 0 to 512 [ 92.106361][ T6361] lo speed is unknown, defaulting to 1000 [ 92.106880][ T6358] ext4: Bad value for 'init_itable' [ 92.119469][ T6361] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.132718][ T6361] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.184376][ T6369] EXT4-fs: Ignoring removed oldalloc option [ 92.190403][ T6369] EXT4-fs: inline encryption not supported [ 92.204596][ T6361] lo speed is unknown, defaulting to 1000 [ 92.217188][ T6361] lo speed is unknown, defaulting to 1000 [ 92.221165][ T6369] journal_path: Lookup failure for './file0' [ 92.229851][ T6369] EXT4-fs: error: could not find journal device path [ 92.250144][ T6361] lo speed is unknown, defaulting to 1000 [ 92.257442][ T6361] lo speed is unknown, defaulting to 1000 [ 92.279301][ T6375] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 92.292957][ T6361] lo speed is unknown, defaulting to 1000 [ 92.300179][ T6376] EXT4-fs: Ignoring removed bh option [ 92.322649][ T6361] lo speed is unknown, defaulting to 1000 [ 92.335654][ T6361] lo speed is unknown, defaulting to 1000 [ 92.347575][ T6376] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.376614][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 92.397546][ T6382] lo speed is unknown, defaulting to 1000 [ 92.423865][ T6384] EXT4-fs: Ignoring removed bh option [ 92.433253][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 92.450860][ T6386] lo speed is unknown, defaulting to 1000 [ 92.466823][ T6384] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.487608][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 92.527616][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 92.554276][ T6396] EXT4-fs: Ignoring removed oldalloc option [ 92.560401][ T6396] EXT4-fs: Ignoring removed i_version option [ 92.567305][ T6396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.576902][ T6396] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.588315][ T6396] EXT4-fs (loop5): 1 truncate cleaned up [ 92.720323][ T6405] lo speed is unknown, defaulting to 1000 [ 92.793747][ T6410] Invalid ELF header magic: != ELF [ 92.814912][ T6411] siw: device registration error -23 [ 92.957665][ T6416] validate_nla: 6 callbacks suppressed [ 92.957681][ T6416] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 93.013843][ T6418] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 93.192234][ T6416] bond0: (slave dummy0): Releasing backup interface [ 93.213053][ T6424] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 93.214239][ T6416] team0: Port device dummy0 added [ 93.248594][ T6418] team0: Port device dummy0 removed [ 93.254197][ T6426] FAULT_INJECTION: forcing a failure. [ 93.254197][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 93.256481][ T6418] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.267023][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.3.867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.267051][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.267124][ T6426] Call Trace: [ 93.267130][ T6426] [ 93.267138][ T6426] __dump_stack+0x1d/0x30 [ 93.267163][ T6426] dump_stack_lvl+0x95/0xd0 [ 93.267185][ T6426] dump_stack+0x15/0x1b [ 93.267206][ T6426] should_fail_ex+0x265/0x280 [ 93.267263][ T6426] should_failslab+0x8c/0xb0 [ 93.267283][ T6426] __kmalloc_noprof+0xb9/0x5a0 [ 93.267311][ T6426] ? kernfs_fop_write_iter+0xe2/0x300 [ 93.267417][ T6426] ? avc_policy_seqno+0x15/0x30 [ 93.267435][ T6426] ? selinux_file_permission+0x1e2/0x320 [ 93.267466][ T6426] kernfs_fop_write_iter+0xe2/0x300 [ 93.267547][ T6426] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.267578][ T6426] vfs_write+0x52a/0x960 [ 93.267606][ T6426] ksys_write+0xda/0x1a0 [ 93.267626][ T6426] __x64_sys_write+0x40/0x50 [ 93.267721][ T6426] x64_sys_call+0x2847/0x3000 [ 93.267746][ T6426] do_syscall_64+0xca/0x2b0 [ 93.267898][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.267920][ T6426] RIP: 0033:0x7f8e21a9f749 [ 93.267936][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.268022][ T6426] RSP: 002b:00007f8e20507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.268041][ T6426] RAX: ffffffffffffffda RBX: 00007f8e21cf5fa0 RCX: 00007f8e21a9f749 [ 93.268054][ T6426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.268067][ T6426] RBP: 00007f8e20507090 R08: 0000000000000000 R09: 0000000000000000 [ 93.268079][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.268134][ T6426] R13: 00007f8e21cf6038 R14: 00007f8e21cf5fa0 R15: 00007ffeb53d6788 [ 93.268152][ T6426] [ 93.555683][ T6438] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.636989][ T6438] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.696096][ T6438] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.752972][ T6438] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.864961][ T1877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.888166][ T1877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897693][ T6451] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 93.910737][ T1877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929282][ T1877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.961417][ T6455] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 94.017948][ T6075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.045993][ T6075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.058777][ T6075] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.077321][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.079282][ T6075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.101178][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.122242][ T3425] hid_parser_main: 8 callbacks suppressed [ 94.122330][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.129667][ T6466] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 94.135571][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.151596][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.159021][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.166438][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.174633][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.182091][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.182913][ T6469] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 94.189472][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.205293][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.212716][ T3425] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 94.220549][ T6466] bond0: (slave dummy0): Releasing backup interface [ 94.221278][ T3425] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 94.242875][ T6466] team0: Port device dummy0 added [ 94.260388][ T6470] fido_id[6470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.281176][ T6469] team0: Port device dummy0 removed [ 94.289899][ T6469] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.339644][ T6476] set_capacity_and_notify: 10 callbacks suppressed [ 94.339660][ T6476] loop0: detected capacity change from 0 to 2048 [ 94.356439][ T6476] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.366238][ T6476] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.377993][ T6476] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 94.388139][ T6476] EXT4-fs (loop0): group descriptors corrupted! [ 94.399152][ T6474] can0: slcan on ttyS3. [ 94.431741][ T6476] loop0: detected capacity change from 0 to 512 [ 94.462736][ T6476] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.885: corrupted in-inode xattr: invalid ea_ino [ 94.463310][ T6485] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 94.486207][ T6477] can0 (unregistered): slcan off ttyS3. [ 94.489727][ T6476] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.885: couldn't read orphan inode 15 (err -117) [ 94.512502][ T6487] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.542976][ T6491] loop2: detected capacity change from 0 to 128 [ 94.545031][ T6476] netlink: 'syz.0.885': attribute type 12 has an invalid length. [ 94.566582][ T6492] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621645][ T4798] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 94.630919][ T6496] loop3: detected capacity change from 0 to 256 [ 94.651929][ T6496] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.652976][ T6492] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.678254][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.694144][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.723706][ T6496] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.737273][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.755426][ T6505] loop2: detected capacity change from 0 to 512 [ 94.771694][ T6505] EXT4-fs: Ignoring removed oldalloc option [ 94.782287][ T6502] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 94.790340][ T6505] EXT4-fs: inline encryption not supported [ 94.799048][ T6492] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.805407][ T6505] journal_path: Lookup failure for './file0' [ 94.815495][ T6505] EXT4-fs: error: could not find journal device path [ 94.826417][ T6502] team0: Port device dummy0 added [ 94.834108][ T6502] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 94.845331][ T6502] team0: Port device dummy0 removed [ 94.853661][ T6502] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.863429][ T6492] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.929883][ T6072] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.949305][ T6072] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.958605][ T6072] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967106][ T6072] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.031033][ T6517] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 95.072677][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.081574][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.360000][ T6523] FAULT_INJECTION: forcing a failure. [ 95.360000][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 95.373413][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.373430][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.373438][ T6523] Call Trace: [ 95.373442][ T6523] [ 95.373447][ T6523] __dump_stack+0x1d/0x30 [ 95.373464][ T6523] dump_stack_lvl+0x95/0xd0 [ 95.373476][ T6523] dump_stack+0x15/0x1b [ 95.373487][ T6523] should_fail_ex+0x265/0x280 [ 95.373547][ T6523] should_failslab+0x8c/0xb0 [ 95.373569][ T6523] __kmalloc_cache_noprof+0x65/0x4c0 [ 95.373591][ T6523] ? resv_map_alloc+0x57/0x190 [ 95.373606][ T6523] resv_map_alloc+0x57/0x190 [ 95.373665][ T6523] hugetlbfs_get_inode+0x67/0x370 [ 95.373752][ T6523] ? mutex_unlock+0x4f/0x90 [ 95.373779][ T6523] hugetlb_file_setup+0x192/0x3d0 [ 95.373871][ T6523] ksys_mmap_pgoff+0x157/0x310 [ 95.373887][ T6523] x64_sys_call+0x16bb/0x3000 [ 95.373916][ T6523] do_syscall_64+0xca/0x2b0 [ 95.373941][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.373954][ T6523] RIP: 0033:0x7fdf9dcaf749 [ 95.373964][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.373986][ T6523] RSP: 002b:00007fdf9c717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.373998][ T6523] RAX: ffffffffffffffda RBX: 00007fdf9df05fa0 RCX: 00007fdf9dcaf749 [ 95.374008][ T6523] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 95.374081][ T6523] RBP: 00007fdf9c717090 R08: ffffffffffffffff R09: 0000000000000000 [ 95.374088][ T6523] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 95.374096][ T6523] R13: 00007fdf9df06038 R14: 00007fdf9df05fa0 R15: 00007ffd2e9f0418 [ 95.374148][ T6523] [ 95.577235][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.591984][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.783116][ T4487] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 95.823791][ T6542] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 95.838421][ T6539] loop2: detected capacity change from 0 to 512 [ 95.867066][ T6540] fido_id[6540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.882841][ T6539] EXT4-fs: Ignoring removed oldalloc option [ 95.889003][ T6539] EXT4-fs: inline encryption not supported [ 95.917666][ T6539] journal_path: Lookup failure for './file0' [ 95.923066][ T6545] loop3: detected capacity change from 0 to 128 [ 95.923959][ T6539] EXT4-fs: error: could not find journal device path [ 95.955645][ T6545] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.993161][ T6545] __nla_validate_parse: 2 callbacks suppressed [ 95.993176][ T6545] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.914'. [ 96.009311][ T6545] netlink: zone id is out of range [ 96.014515][ T6545] netlink: zone id is out of range [ 96.019818][ T6550] loop5: detected capacity change from 0 to 1024 [ 96.019845][ T6545] netlink: zone id is out of range [ 96.038855][ T6545] netlink: zone id is out of range [ 96.047638][ T6545] netlink: zone id is out of range [ 96.052837][ T6545] netlink: zone id is out of range [ 96.059314][ T6545] netlink: zone id is out of range [ 96.065606][ T6545] netlink: zone id is out of range [ 96.080391][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 96.080404][ T29] audit: type=1400 audit(1768438379.515:17892): avc: denied { write } for pid=6547 comm="syz.5.915" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.109769][ T29] audit: type=1400 audit(1768438379.515:17893): avc: denied { open } for pid=6547 comm="syz.5.915" path="/81/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.146491][ T29] audit: type=1400 audit(1768438379.575:17894): avc: denied { read } for pid=6547 comm="syz.5.915" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.196632][ T29] audit: type=1326 audit(1768438379.585:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.220184][ T29] audit: type=1326 audit(1768438379.585:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.243734][ T29] audit: type=1326 audit(1768438379.585:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.267872][ T29] audit: type=1400 audit(1768438379.585:17898): avc: denied { create } for pid=6544 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.287467][ T29] audit: type=1326 audit(1768438379.585:17899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.310991][ T29] audit: type=1326 audit(1768438379.605:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.335241][ T29] audit: type=1326 audit(1768438379.605:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e21a9f749 code=0x7ffc0000 [ 96.360557][ T5206] EXT4-fs unmount: 30 callbacks suppressed [ 96.360572][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.377891][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.420156][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.460480][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.490069][ T6569] loop5: detected capacity change from 0 to 128 [ 96.524653][ T6557] loop2: detected capacity change from 0 to 1024 [ 96.582927][ T6557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.766750][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.804784][ T6579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.856922][ T6587] 9p: Bad value for 'rfdno' [ 96.906823][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.934011][ T6588] can0: slcan on ttyS3. [ 97.111606][ T6594] can0 (unregistered): slcan off ttyS3. [ 97.159116][ T6602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.321118][ T6602] EXT4-fs (loop3): 1 truncate cleaned up [ 97.365276][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.498011][ T6602] EXT4-fs (loop3): shut down requested (0) [ 97.540814][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 97.613981][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.667790][ T6615] vlan2: entered promiscuous mode [ 97.835940][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 98.056256][ T6614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.230905][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.324353][ T6637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.331755][ T6637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.397522][ T6637] EXT4-fs (loop3): 1 truncate cleaned up [ 98.405040][ T6637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.465755][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.476704][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.821384][ T6651] lo speed is unknown, defaulting to 1000 [ 98.827185][ T6651] lo speed is unknown, defaulting to 1000 [ 98.834578][ T6651] lo speed is unknown, defaulting to 1000 [ 98.842219][ T6651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.858989][ T6651] lo speed is unknown, defaulting to 1000 [ 98.865447][ T6651] lo speed is unknown, defaulting to 1000 [ 98.872176][ T6651] lo speed is unknown, defaulting to 1000 [ 98.878342][ T6651] lo speed is unknown, defaulting to 1000 [ 98.885119][ T6651] lo speed is unknown, defaulting to 1000 [ 98.920434][ T6652] lo speed is unknown, defaulting to 1000 [ 98.983127][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.007771][ T3483] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 99.033379][ T6659] fido_id[6659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.110415][ T6656] lo speed is unknown, defaulting to 1000 [ 99.128234][ T6664] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 99.147999][ T6667] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28929, delta: 1 [ 99.157654][ T6667] ref_ctr increment failed for inode: 0x470 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811cf40000 [ 99.179786][ T6670] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 99.212992][ T6664] bond0: (slave ªªªªªª): Releasing backup interface [ 99.222766][ T6664] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 99.235082][ T6664] team0: Failed to send options change via netlink (err -105) [ 99.243412][ T6664] team0: Port device ªªªªªª added [ 99.268286][ T6670] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 99.286544][ T6670] team0: Failed to send options change via netlink (err -105) [ 99.295362][ T6670] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 99.304838][ T6670] team0: Port device ªªªªªª removed [ 99.315173][ T6670] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 99.372508][ T6674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.414100][ T6674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.484233][ T6674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.543438][ T6674] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.037640][ T3483] hid_parser_main: 62 callbacks suppressed [ 100.037657][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.051023][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.059209][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.066625][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.074026][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.082285][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.089683][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.097099][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.104501][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.113117][ T3483] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 100.122483][ T3483] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 100.143169][ T1877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.171237][ T1877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.209370][ T1877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.215547][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.224125][ T6689] lo speed is unknown, defaulting to 1000 [ 100.248668][ T1877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.293850][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 100.303836][ T6689] set_capacity_and_notify: 4 callbacks suppressed [ 100.303853][ T6689] loop1: detected capacity change from 0 to 1024 [ 100.331652][ T3397] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 100.349812][ T6689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.362203][ T6698] fido_id[6698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.427883][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.512312][ T6704] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 100.552748][ T6704] bond0: (slave dummy0): Releasing backup interface [ 100.594361][ T6716] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 100.631515][ T6704] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.640333][ T6704] team0: Failed to send options change via netlink (err -105) [ 100.648023][ T6704] team0: Port device dummy0 added [ 100.653521][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 100.670288][ T6718] can0: slcan on ttyS3. [ 100.680806][ T6716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.698245][ T6716] team0: Failed to send options change via netlink (err -105) [ 100.705876][ T6716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.714884][ T6716] team0: Port device dummy0 removed [ 100.722549][ T6716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.733982][ T6720] lo speed is unknown, defaulting to 1000 [ 100.746810][ T6727] loop1: detected capacity change from 0 to 128 [ 100.752455][ T6726] lo speed is unknown, defaulting to 1000 [ 100.790263][ T6727] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.791244][ T3616] Bluetooth: hci0: sending frame failed (-49) [ 100.808899][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 100.815880][ T6718] can0 (unregistered): slcan off ttyS3. [ 100.824449][ T6727] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.918327][ T6720] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.969'. [ 100.927740][ T6720] net_ratelimit: 56 callbacks suppressed [ 100.927754][ T6720] netlink: zone id is out of range [ 100.939299][ T6720] netlink: zone id is out of range [ 100.944612][ T6720] netlink: zone id is out of range [ 100.949886][ T6720] netlink: zone id is out of range [ 100.955196][ T6720] netlink: zone id is out of range [ 100.960335][ T6720] netlink: zone id is out of range [ 100.966322][ T6720] netlink: zone id is out of range [ 100.971714][ T6720] netlink: zone id is out of range [ 100.976853][ T6720] netlink: zone id is out of range [ 100.982212][ T6720] netlink: zone id is out of range [ 100.982475][ T6732] lo speed is unknown, defaulting to 1000 [ 101.092447][ T29] kauditd_printk_skb: 918 callbacks suppressed [ 101.092468][ T29] audit: type=1400 audit(1768438384.535:18820): avc: denied { create } for pid=6747 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.131816][ T29] audit: type=1326 audit(1768438384.575:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9035612005 code=0x7ffc0000 [ 101.156376][ T29] audit: type=1326 audit(1768438384.575:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.180617][ T29] audit: type=1326 audit(1768438384.575:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.204086][ T29] audit: type=1326 audit(1768438384.585:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.228319][ T29] audit: type=1326 audit(1768438384.585:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.247017][ T6748] can0: slcan on ttyS3. [ 101.254611][ T29] audit: type=1326 audit(1768438384.675:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.279625][ T29] audit: type=1326 audit(1768438384.695:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9035612005 code=0x7ffc0000 [ 101.305353][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.354733][ T29] audit: type=1326 audit(1768438384.795:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9035612005 code=0x7ffc0000 [ 101.383709][ T6750] can0 (unregistered): slcan off ttyS3. [ 101.397657][ T29] audit: type=1326 audit(1768438384.835:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 101.487008][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 101.524268][ T6757] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 101.541577][ T6765] netlink: 'syz.0.984': attribute type 32 has an invalid length. [ 101.549399][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 101.587058][ T6757] bond0: (slave dummy0): Releasing backup interface [ 101.606560][ T3482] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 101.623190][ T6771] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 101.637229][ T6770] fido_id[6770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.642944][ T6757] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.660725][ T6757] team0: Failed to send options change via netlink (err -105) [ 101.669002][ T6757] team0: Port device dummy0 added [ 101.685793][ T6767] can0: slcan on ttyS3. [ 101.697567][ T6765] bond1: option coupled_control: invalid value (17) [ 101.720560][ T6765] bond1 (unregistering): Released all slaves [ 101.739530][ T6771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.778031][ T3483] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 101.798471][ T6771] team0: Failed to send options change via netlink (err -105) [ 101.826085][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.877274][ T6771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.911579][ T6771] team0: Port device dummy0 removed [ 101.926381][ T6771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.971772][ T6772] can0 (unregistered): slcan off ttyS3. [ 102.032756][ T6786] loop0: detected capacity change from 0 to 512 [ 102.039660][ T6786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.049841][ T6786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.183987][ T6786] EXT4-fs (loop0): 1 truncate cleaned up [ 102.190046][ T6786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.284222][ T6796] loop3: detected capacity change from 0 to 128 [ 102.295070][ T6793] lo speed is unknown, defaulting to 1000 [ 102.334225][ T6796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.356210][ T6796] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.369111][ T6796] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.993'. [ 102.412639][ T6110] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.445171][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.487504][ T6801] lo speed is unknown, defaulting to 1000 [ 102.508326][ T6805] ªªªªªª: renamed from dummy0 (while UP) [ 102.526753][ T6807] lo speed is unknown, defaulting to 1000 [ 102.536172][ T6808] lo speed is unknown, defaulting to 1000 [ 102.640585][ T6818] loop5: detected capacity change from 0 to 128 [ 102.700115][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.720467][ T6809] loop3: detected capacity change from 0 to 1024 [ 102.741049][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.751967][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.797838][ T6820] netlink: 'syz.5.1004': attribute type 10 has an invalid length. [ 102.808267][ T6809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.821448][ T6820] bond0: (slave ªªªªªª): Releasing backup interface [ 102.831082][ T6820] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 102.841612][ T6820] team0: Failed to send options change via netlink (err -105) [ 102.849129][ T6820] team0: Port device ªªªªªª added [ 102.856560][ T6827] netlink: 'syz.5.1004': attribute type 10 has an invalid length. [ 102.868613][ T6827] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 102.869185][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.887028][ T6827] team0: Failed to send options change via netlink (err -105) [ 102.895631][ T6827] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 102.904745][ T6827] team0: Port device ªªªªªª removed [ 102.914550][ T6827] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 102.949381][ T6831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.990613][ T6838] loop3: detected capacity change from 0 to 256 [ 102.998539][ T6837] lo speed is unknown, defaulting to 1000 [ 103.012584][ T6838] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.031792][ T6838] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.062635][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1012'. [ 103.075417][ T6840] vlan2: entered promiscuous mode [ 103.080507][ T6840] gretap0: entered promiscuous mode [ 103.094325][ T6831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.115990][ T6837] loop1: detected capacity change from 0 to 1024 [ 103.143936][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.174123][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.185725][ T6831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.243208][ T6849] loop5: detected capacity change from 0 to 128 [ 103.244224][ T6831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.309100][ T6851] lo speed is unknown, defaulting to 1000 [ 103.317097][ T6853] loop5: detected capacity change from 0 to 256 [ 103.328012][ T6853] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.346717][ T6853] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.386578][ T6856] EXT4-fs: Ignoring removed bh option [ 103.414247][ T6856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.437157][ T6856] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.451621][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 103.482734][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 103.484015][ T6862] netlink: 'syz.5.1020': attribute type 10 has an invalid length. [ 103.505872][ T6862] bond0: (slave ªªªªªª): Releasing backup interface [ 103.517962][ T6862] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 103.527992][ T6862] team0: Failed to send options change via netlink (err -105) [ 103.535526][ T6862] team0: Port device ªªªªªª added [ 103.544439][ T6867] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 103.555977][ T6867] team0: Failed to send options change via netlink (err -105) [ 103.563668][ T6867] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 103.573160][ T6867] team0: Port device ªªªªªª removed [ 103.581035][ T6867] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 103.590967][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.620024][ T6871] EXT4-fs: Ignoring removed bh option [ 103.653503][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.668272][ T6871] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.671763][ T6879] can0: slcan on ttyS3. [ 103.690218][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 103.725587][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 103.772819][ T6879] can0 (unregistered): slcan off ttyS3. [ 103.773370][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.816401][ T6883] lo speed is unknown, defaulting to 1000 [ 103.862412][ T6882] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.919857][ T6882] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.028335][ T6889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.035727][ T6889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.114718][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 104.121161][ T6889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.208775][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.224346][ T6895] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.280077][ T6897] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.332155][ T6897] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.358673][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.369507][ T6895] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.410124][ T6899] EXT4-fs: Ignoring removed bh option [ 104.432141][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.433970][ T6899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.438469][ T3616] Bluetooth: hci0: command 0x1003 tx timeout [ 104.452302][ T6899] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.469866][ T6895] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.474939][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 104.490337][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 104.524424][ T6895] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.560104][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585542][ T6072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.597948][ T6072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.613215][ T6072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.621845][ T6072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.646531][ T6905] validate_nla: 1 callbacks suppressed [ 104.646546][ T6905] netlink: 'syz.5.1036': attribute type 10 has an invalid length. [ 104.699886][ T6905] bond0: (slave ªªªªªª): Releasing backup interface [ 104.715533][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.717615][ T6905] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 104.729008][ T6908] netlink: 'syz.5.1036': attribute type 10 has an invalid length. [ 104.734327][ T6905] team0: Failed to send options change via netlink (err -105) [ 104.749569][ T6905] team0: Port device ªªªªªª added [ 104.756138][ T3483] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 104.765836][ T6908] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 104.775840][ T6908] team0: Failed to send options change via netlink (err -105) [ 104.801718][ T6908] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 104.816212][ T6909] fido_id[6909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.816272][ T6908] team0: Port device ªªªªªª removed [ 104.841135][ T6908] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 104.852647][ T6913] ªªªªªª: renamed from dummy0 (while UP) [ 104.868059][ T6072] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.887914][ T6072] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.907668][ T6915] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 104.913987][ T6072] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.942584][ T6915] bond0: (slave dummy0): Releasing backup interface [ 104.946659][ T6919] EXT4-fs: Ignoring removed bh option [ 104.959591][ T6915] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.969663][ T6915] team0: Failed to send options change via netlink (err -105) [ 104.970778][ T6921] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 104.978067][ T6915] team0: Port device dummy0 added [ 104.999733][ T6072] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.010652][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.010850][ T6921] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.043254][ T6919] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.076006][ T6921] team0: Failed to send options change via netlink (err -105) [ 105.083694][ T6921] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.094494][ T6921] team0: Port device dummy0 removed [ 105.102673][ T6921] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.146423][ T6927] lo speed is unknown, defaulting to 1000 [ 105.203209][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.221109][ T6937] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.242663][ T4798] hid_parser_main: 80 callbacks suppressed [ 105.242725][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.256750][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.264183][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.271637][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.279130][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.287477][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.295436][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.302966][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.310438][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.318721][ T4798] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 105.331284][ T6937] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.350006][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.355466][ T4798] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 105.374868][ T6937] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.388421][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.415709][ T6948] ªªªªªª: renamed from dummy0 (while UP) [ 105.421767][ T6947] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 105.434537][ T6947] bond0: (slave dummy0): Releasing backup interface [ 105.445412][ T6947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.459764][ T6947] team0: Failed to send options change via netlink (err -105) [ 105.467382][ T6947] team0: Port device dummy0 added [ 105.475192][ T6937] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.487077][ T6947] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 105.495905][ T6950] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.507863][ T6947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.521093][ T6947] team0: Failed to send options change via netlink (err -105) [ 105.528839][ T6951] set_capacity_and_notify: 10 callbacks suppressed [ 105.528856][ T6951] loop2: detected capacity change from 0 to 256 [ 105.535695][ T6947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.535880][ T6947] team0: Port device dummy0 removed [ 105.537708][ T6947] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.545779][ T6951] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.582062][ T6951] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.612774][ T6955] loop0: detected capacity change from 0 to 128 [ 105.619928][ T6950] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.693764][ T6950] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.733844][ T6963] loop0: detected capacity change from 0 to 512 [ 105.740553][ T6963] EXT4-fs: Ignoring removed bh option [ 105.749390][ T6950] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.763936][ T6963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.777463][ T6963] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.795885][ T6072] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.807745][ T6072] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.819917][ T6072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.832673][ T6072] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.882930][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.923515][ T6969] loop0: detected capacity change from 0 to 512 [ 105.946930][ T6969] EXT4-fs: Ignoring removed oldalloc option [ 105.956543][ T6969] EXT4-fs: inline encryption not supported [ 105.960565][ T6971] loop5: detected capacity change from 0 to 512 [ 105.963788][ T6969] journal_path: Lookup failure for './file0' [ 105.975575][ T6969] EXT4-fs: error: could not find journal device path [ 105.982254][ T6971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.010352][ T6971] EXT4-fs (loop5): 1 truncate cleaned up [ 106.041596][ T6971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.062250][ T6971] EXT4-fs (loop5): shut down requested (0) [ 106.073216][ T6980] siw: device registration error -23 [ 106.076948][ T6967] lo speed is unknown, defaulting to 1000 [ 106.081390][ T6978] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 106.100222][ T6978] bond0: (slave ªªªªªª): Releasing backup interface [ 106.108698][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.117911][ T6972] loop2: detected capacity change from 0 to 512 [ 106.125043][ T29] kauditd_printk_skb: 2007 callbacks suppressed [ 106.125057][ T29] audit: type=1400 audit(1768438389.555:20837): avc: denied { remount } for pid=6966 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.136287][ T6978] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 106.162552][ T6981] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 106.173682][ T29] audit: type=1326 audit(1768438389.575:20838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9dcaf749 code=0x7ffc0000 [ 106.198912][ T29] audit: type=1326 audit(1768438389.575:20839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9dcaf749 code=0x7ffc0000 [ 106.212337][ T6978] team0: Failed to send options change via netlink (err -105) [ 106.224249][ T29] audit: type=1326 audit(1768438389.575:20840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf9dcaf783 code=0x7ffc0000 [ 106.230954][ T6978] team0: Port device ªªªªªª added [ 106.255929][ T29] audit: type=1326 audit(1768438389.575:20841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdf9dcaf807 code=0x7ffc0000 [ 106.283502][ T29] audit: type=1326 audit(1768438389.575:20842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdf9dc66bdd code=0x7ffc0000 [ 106.308545][ T29] audit: type=1326 audit(1768438389.575:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdf9dce3e89 code=0x7ffc0000 [ 106.333583][ T29] audit: type=1326 audit(1768438389.575:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdf9dc66c47 code=0x7ffc0000 [ 106.357093][ T29] audit: type=1326 audit(1768438389.575:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9dcaf749 code=0x7ffc0000 [ 106.359214][ T6983] lo speed is unknown, defaulting to 1000 [ 106.382241][ T29] audit: type=1326 audit(1768438389.575:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9dcaf749 code=0x7ffc0000 [ 106.388513][ T6981] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 106.421781][ T6986] loop0: detected capacity change from 0 to 1024 [ 106.447025][ T6981] team0: Failed to send options change via netlink (err -105) [ 106.454776][ T6981] team0: Failed to send port change of device ªªªªªª via netlink (err -105) [ 106.459726][ T6986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.470011][ T6981] team0: Port device ªªªªªª removed [ 106.499069][ T6981] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 106.572915][ T6992] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.589937][ T6994] loop5: detected capacity change from 0 to 512 [ 106.599707][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.600120][ T6994] EXT4-fs: Ignoring removed bh option [ 106.625442][ T7001] loop1: detected capacity change from 0 to 256 [ 106.632380][ T6994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.645290][ T6994] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.645985][ T7001] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.672138][ T7001] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.675335][ T6994] __nla_validate_parse: 5 callbacks suppressed [ 106.675351][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 106.709540][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 106.751944][ T6992] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.800206][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.823123][ T6992] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.866924][ T7013] can0: slcan on ttyS3. [ 106.873490][ T6992] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.961368][ T7013] can0 (unregistered): slcan off ttyS3. [ 107.016454][ T6075] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.028165][ T6075] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.039423][ T6075] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.053217][ T6075] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.088562][ T7015] lo speed is unknown, defaulting to 1000 [ 107.134715][ T7019] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -9478, delta: 1 [ 107.137555][ T7018] lo speed is unknown, defaulting to 1000 [ 107.143437][ T7019] ref_ctr increment failed for inode: 0x2b7 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811cfa06c0 [ 107.227037][ T7024] loop1: detected capacity change from 0 to 1024 [ 107.236954][ T7024] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.248563][ T7024] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.257851][ T7024] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.265709][ T7024] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1080: Failed to acquire dquot type 0 [ 107.277607][ T7024] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1080: Failed to acquire dquot type 0 [ 107.294311][ T7024] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1080: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.308218][ T7024] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1080: Failed to acquire dquot type 0 [ 107.320782][ T7024] EXT4-fs (loop1): 1 orphan inode deleted [ 107.327179][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.365608][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.518145][ T7027] lo speed is unknown, defaulting to 1000 [ 107.534761][ T7031] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.561554][ T7031] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.754625][ T7037] lo speed is unknown, defaulting to 1000 [ 107.762515][ T7039] EXT4-fs: Ignoring removed bh option [ 107.813654][ T7039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.847639][ T7039] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.897631][ T7037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.934735][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.964189][ T7046] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.985454][ T7046] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.021168][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.064683][ T7052] siw: device registration error -23 [ 108.078495][ T7050] lo speed is unknown, defaulting to 1000 [ 108.097609][ T7054] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.108894][ T7054] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.130477][ T7054] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.137795][ T7054] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1091: Failed to acquire dquot type 0 [ 108.156080][ T7054] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1091: Failed to acquire dquot type 0 [ 108.167660][ T7054] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1091: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.182625][ T7054] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1091: Failed to acquire dquot type 0 [ 108.194200][ T7054] EXT4-fs (loop0): 1 orphan inode deleted [ 108.200560][ T7054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.227902][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.245707][ T7050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.284415][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.314183][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'. [ 108.323207][ T7066] netlink: 'syz.0.1093': attribute type 7 has an invalid length. [ 108.330918][ T7066] netlink: 'syz.0.1093': attribute type 8 has an invalid length. [ 108.338814][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 108.585969][ T7074] lo speed is unknown, defaulting to 1000 [ 109.048053][ T6115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.075585][ T6115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.103238][ T6115] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.112682][ T7079] lo speed is unknown, defaulting to 1000 [ 109.126859][ T6115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.146815][ T7082] EXT4-fs: Ignoring removed bh option [ 109.163007][ T7083] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -14274, delta: 1 [ 109.169757][ T7085] lo speed is unknown, defaulting to 1000 [ 109.173336][ T7083] ref_ctr increment failed for inode: 0x2cc offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88811cfa2880 [ 109.192357][ T7082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.266502][ T7082] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.348094][ T7093] siw: device registration error -23 [ 109.427172][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.454994][ T7097] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.480794][ T7097] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 109.491895][ T7101] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.516982][ T7101] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.527908][ T7097] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.535172][ T7097] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1103: Failed to acquire dquot type 0 [ 109.541608][ T7104] can0: slcan on ttyS3. [ 109.570800][ T7097] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1103: Failed to acquire dquot type 0 [ 109.612302][ T7097] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1103: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.626050][ T7104] can0 (unregistered): slcan off ttyS3. [ 109.638094][ T7097] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1103: Failed to acquire dquot type 0 [ 109.656818][ T7097] EXT4-fs (loop3): 1 orphan inode deleted [ 109.664310][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.690438][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1109'. [ 109.699503][ T7113] netlink: 'syz.2.1109': attribute type 7 has an invalid length. [ 109.699517][ T7113] netlink: 'syz.2.1109': attribute type 8 has an invalid length. [ 109.699527][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 109.763056][ T7115] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 109.780992][ T7115] bond0: (slave dummy0): Releasing backup interface [ 109.784255][ T7115] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.784338][ T7115] team0: Failed to send options change via netlink (err -105) [ 109.784355][ T7115] team0: Port device dummy0 added [ 109.786004][ T7115] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 109.786597][ T7115] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.790361][ T7115] team0: Failed to send options change via netlink (err -105) [ 109.790414][ T7115] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 109.790617][ T7115] team0: Port device dummy0 removed [ 109.794139][ T7115] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.815541][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.869252][ T7118] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.899165][ T7118] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.933385][ T7121] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.933776][ T7121] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.942983][ T7118] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.985774][ T7118] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.012791][ T7123] EXT4-fs: Ignoring removed bh option [ 110.083699][ T1877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.094492][ T7123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.095986][ T6075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.119606][ T7123] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.120553][ T7128] net_ratelimit: 117 callbacks suppressed [ 110.120566][ T7128] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.135544][ T6075] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.165115][ T6075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.213178][ T7131] lo speed is unknown, defaulting to 1000 [ 110.255839][ T7130] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.307448][ T7135] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.343964][ T7137] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.355059][ T7135] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.377223][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.399554][ T7138] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.418622][ T7138] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.443342][ T7130] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.484484][ T7137] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.508103][ T7143] EXT4-fs: Ignoring removed bh option [ 110.517325][ T7144] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.533072][ T7130] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.550084][ T7144] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.561648][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.574366][ T7143] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.586708][ T7137] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.588509][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 110.617839][ T7130] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.622971][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 110.639718][ T7148] set_capacity_and_notify: 16 callbacks suppressed [ 110.639733][ T7148] loop5: detected capacity change from 0 to 128 [ 110.667919][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.693592][ T7137] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.708009][ T7150] siw: device registration error -23 [ 110.836429][ T7154] can0: slcan on ttyS3. [ 110.842087][ T7160] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.855785][ T7163] loop3: detected capacity change from 0 to 256 [ 110.862795][ T7163] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.882294][ T7163] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.911017][ T7152] lo speed is unknown, defaulting to 1000 [ 110.934617][ T7160] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.956049][ T7161] can0 (unregistered): slcan off ttyS3. [ 110.983650][ T7160] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.074724][ T7160] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.090331][ T7169] loop5: detected capacity change from 0 to 1024 [ 111.124225][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.136498][ T7169] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.150885][ T7169] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1129: bg 0: block 112: padding at end of block bitmap is not set [ 111.170473][ T6072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.183974][ T6072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.186287][ T7169] EXT4-fs (loop5): Remounting filesystem read-only [ 111.204321][ T6072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.217235][ T6072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.225523][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 111.225574][ T29] audit: type=1400 audit(1768438394.655:21311): avc: denied { link } for pid=7167 comm="syz.5.1129" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.281957][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.353133][ T7177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 111.362191][ T7177] netlink: 'syz.1.1130': attribute type 7 has an invalid length. [ 111.369999][ T7177] netlink: 'syz.1.1130': attribute type 8 has an invalid length. [ 111.379466][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 111.405425][ T7179] loop5: detected capacity change from 0 to 256 [ 111.428572][ T7179] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.463431][ T7179] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.497165][ T7182] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 111.510570][ T29] audit: type=1326 audit(1768438394.945:21312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.553158][ T29] audit: type=1326 audit(1768438394.975:21313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.577489][ T29] audit: type=1326 audit(1768438394.975:21314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.601177][ T29] audit: type=1326 audit(1768438394.975:21315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.625519][ T29] audit: type=1326 audit(1768438394.975:21316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.649011][ T29] audit: type=1326 audit(1768438394.975:21317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.656505][ T7185] loop5: detected capacity change from 0 to 512 [ 111.673445][ T29] audit: type=1326 audit(1768438394.975:21318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90355df749 code=0x7ffc0000 [ 111.712859][ T7185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.723271][ T29] audit: type=1326 audit(1768438395.155:21319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 111.748144][ T7185] EXT4-fs (loop5): 1 truncate cleaned up [ 111.755349][ T7184] EXT4-fs (loop5): shut down requested (0) [ 111.792923][ T7188] loop5: detected capacity change from 0 to 128 [ 111.930110][ T7192] can0: slcan on ttyS3. [ 111.982062][ T7192] can0 (unregistered): slcan off ttyS3. [ 111.995788][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 112.014193][ T7195] hsr_slave_1 (unregistering): left promiscuous mode [ 112.072377][ T7196] lo speed is unknown, defaulting to 1000 [ 112.128218][ T29] audit: type=1326 audit(1768438395.565:21320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775b10f749 code=0x7ffc0000 [ 112.179220][ T7200] loop2: detected capacity change from 0 to 512 [ 112.194335][ T7200] EXT4-fs: Ignoring removed bh option [ 112.244605][ T7200] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.259245][ T7202] loop1: detected capacity change from 0 to 256 [ 112.285805][ T7202] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.300267][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 112.317672][ T7202] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.353730][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 112.383225][ T6072] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.389850][ T7208] loop2: detected capacity change from 0 to 256 [ 112.398258][ T7208] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.411029][ T7208] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.450779][ T7211] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 112.452136][ T7209] lo speed is unknown, defaulting to 1000 [ 112.498339][ T7216] loop2: detected capacity change from 0 to 128 [ 112.605331][ T7219] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.618159][ T7219] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1147: bg 0: block 112: padding at end of block bitmap is not set [ 112.633405][ T7219] EXT4-fs (loop2): Remounting filesystem read-only [ 112.695877][ T7225] lo speed is unknown, defaulting to 1000 [ 112.847850][ T7231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.855666][ T7231] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.869248][ T7231] EXT4-fs (loop5): 1 truncate cleaned up [ 112.889817][ T7236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.906526][ T7236] EXT4-fs (loop2): 1 truncate cleaned up [ 112.914535][ T7236] EXT4-fs (loop2): shut down requested (0) [ 112.956426][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1153'. [ 112.974065][ T7243] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 112.975135][ T7239] vlan2: entered promiscuous mode [ 113.056398][ T7249] siw: device registration error -23 [ 113.079618][ T7251] can0: slcan on ttyS3. [ 113.122996][ T7251] can0 (unregistered): slcan off ttyS3. [ 113.166603][ T7257] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 113.213893][ T6075] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.222265][ T7260] lo speed is unknown, defaulting to 1000 [ 113.222399][ T6075] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.247056][ T6075] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.260160][ T6075] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.316130][ T7262] lo speed is unknown, defaulting to 1000 [ 113.394733][ T7264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.447295][ T7264] EXT4-fs (loop3): 1 truncate cleaned up [ 113.476164][ T7264] EXT4-fs (loop3): shut down requested (0) [ 113.500594][ T7269] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 113.667797][ T7277] siw: device registration error -23 [ 113.713635][ T7273] lo speed is unknown, defaulting to 1000 [ 114.016887][ T7293] lo speed is unknown, defaulting to 1000 [ 114.301111][ T7303] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 114.425605][ T7307] EXT4-fs: Ignoring removed bh option [ 114.432892][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 114.433517][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.453364][ T7307] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.467425][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'. [ 114.483785][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'. [ 114.579280][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1181'. [ 114.595731][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1181'. [ 114.716046][ T7313] lo speed is unknown, defaulting to 1000 [ 114.834535][ T1877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.862148][ T1877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.883884][ T1877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.901069][ T1877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.920721][ T7328] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.942629][ T7328] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.008442][ T7331] lo speed is unknown, defaulting to 1000 [ 115.066307][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1192'. [ 115.112899][ T7337] lo speed is unknown, defaulting to 1000 [ 115.396683][ T7357] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.445773][ T7358] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.485967][ T3508] ================================================================== [ 115.494075][ T3508] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 115.501195][ T3508] [ 115.503518][ T3508] write to 0xffff888105267dfc of 4 bytes by task 3308 on cpu 1: [ 115.511138][ T3508] shmem_symlink+0x387/0x3b0 [ 115.515734][ T3508] vfs_symlink+0x1b4/0x1f0 [ 115.520150][ T3508] do_symlinkat+0xf0/0x470 [ 115.524563][ T3508] __x64_sys_symlink+0x50/0x60 [ 115.529337][ T3508] x64_sys_call+0x24a9/0x3000 [ 115.534102][ T3508] do_syscall_64+0xca/0x2b0 [ 115.538613][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.544507][ T3508] [ 115.546835][ T3508] read to 0xffff888105267dfc of 4 bytes by task 3508 on cpu 0: [ 115.554454][ T3508] fill_mg_cmtime+0x5b/0x260 [ 115.559040][ T3508] generic_fillattr+0x24a/0x340 [ 115.563916][ T3508] shmem_getattr+0x181/0x200 [ 115.568508][ T3508] vfs_getattr_nosec+0x146/0x1e0 [ 115.573444][ T3508] vfs_statx+0x113/0x390 [ 115.577674][ T3508] vfs_fstatat+0x115/0x170 [ 115.582080][ T3508] __se_sys_newfstatat+0x55/0x260 [ 115.587107][ T3508] __x64_sys_newfstatat+0x55/0x70 [ 115.592123][ T3508] x64_sys_call+0x111f/0x3000 [ 115.596796][ T3508] do_syscall_64+0xca/0x2b0 [ 115.601297][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.607182][ T3508] [ 115.609490][ T3508] value changed: 0x36909c21 -> 0x3772459d [ 115.615193][ T3508] [ 115.617508][ T3508] Reported by Kernel Concurrency Sanitizer on: [ 115.623643][ T3508] CPU: 0 UID: 0 PID: 3508 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.632915][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.642957][ T3508] ================================================================== [ 115.672783][ T7358] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.705979][ T7357] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.774104][ T7361] lo speed is unknown, defaulting to 1000 [ 115.816496][ T7357] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.864453][ T7357] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.232048][ T29] kauditd_printk_skb: 2165 callbacks suppressed [ 116.232129][ T29] audit: type=1326 audit(1768438399.675:23486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.263457][ T29] audit: type=1326 audit(1768438399.675:23487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.287723][ T29] audit: type=1326 audit(1768438399.675:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.311962][ T29] audit: type=1326 audit(1768438399.675:23489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.335682][ T29] audit: type=1326 audit(1768438399.675:23490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.359941][ T29] audit: type=1326 audit(1768438399.675:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.384121][ T29] audit: type=1326 audit(1768438399.675:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.407585][ T29] audit: type=1326 audit(1768438399.675:23493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.432234][ T29] audit: type=1326 audit(1768438399.675:23494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 116.455726][ T29] audit: type=1326 audit(1768438399.675:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf9dce2005 code=0x7ffc0000 [ 117.712196][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.714331][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 118.676286][ T1877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.688633][ T1877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.699816][ T1877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.710677][ T1877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0