last executing test programs: 1.114908978s ago: executing program 0 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.075105628s ago: executing program 0 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x101}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 1.03038625s ago: executing program 0 (id=1210): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 980.689911ms ago: executing program 0 (id=1212): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) 880.402112ms ago: executing program 3 (id=1218): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 744.237515ms ago: executing program 3 (id=1222): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 710.108716ms ago: executing program 3 (id=1223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 675.024747ms ago: executing program 1 (id=1224): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,p']) 619.122858ms ago: executing program 1 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 573.524868ms ago: executing program 3 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 567.190889ms ago: executing program 2 (id=1231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 548.860609ms ago: executing program 1 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffe56, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 525.34ms ago: executing program 1 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r4, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 491.48058ms ago: executing program 1 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) 491.09714ms ago: executing program 4 (id=1235): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 471.513091ms ago: executing program 4 (id=1236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 435.310741ms ago: executing program 1 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 403.533922ms ago: executing program 2 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) unshare(0x22020600) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a4) sync_file_range(r1, 0xe61a, 0x8, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 397.514992ms ago: executing program 3 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 379.843312ms ago: executing program 4 (id=1240): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1}]) 379.373332ms ago: executing program 2 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xc}}}, 0x24}}, 0x4040004) 364.516293ms ago: executing program 3 (id=1242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 166.302436ms ago: executing program 4 (id=1243): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 166.175207ms ago: executing program 2 (id=1244): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 165.884636ms ago: executing program 4 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 102.357578ms ago: executing program 0 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x10000], 0x0, 0x0, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 102.228758ms ago: executing program 2 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 102.089198ms ago: executing program 4 (id=1248): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 70.395858ms ago: executing program 0 (id=1249): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 0s ago: executing program 2 (id=1250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 24.365759][ T29] audit: type=1400 audit(1758066082.250:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.366668][ T3294] cgroup: Unknown subsys name 'net' [ 24.388489][ T29] audit: type=1400 audit(1758066082.250:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.415818][ T29] audit: type=1400 audit(1758066082.280:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.539419][ T3294] cgroup: Unknown subsys name 'cpuset' [ 24.545641][ T3294] cgroup: Unknown subsys name 'rlimit' [ 24.694803][ T29] audit: type=1400 audit(1758066082.580:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.718032][ T29] audit: type=1400 audit(1758066082.580:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.738522][ T29] audit: type=1400 audit(1758066082.580:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.752222][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.758935][ T29] audit: type=1400 audit(1758066082.580:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.787696][ T29] audit: type=1400 audit(1758066082.590:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.800948][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.812511][ T29] audit: type=1400 audit(1758066082.590:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.844370][ T29] audit: type=1400 audit(1758066082.660:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.946709][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.962237][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 25.999105][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.014056][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.047994][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.088817][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.095988][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.103225][ T3304] bridge_slave_0: entered allmulticast mode [ 26.109703][ T3304] bridge_slave_0: entered promiscuous mode [ 26.120077][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.127177][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.134326][ T3305] bridge_slave_0: entered allmulticast mode [ 26.140753][ T3305] bridge_slave_0: entered promiscuous mode [ 26.151013][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.158181][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.165334][ T3304] bridge_slave_1: entered allmulticast mode [ 26.171662][ T3304] bridge_slave_1: entered promiscuous mode [ 26.184785][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.191874][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.199011][ T3305] bridge_slave_1: entered allmulticast mode [ 26.205395][ T3305] bridge_slave_1: entered promiscuous mode [ 26.222236][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.229400][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.236495][ T3314] bridge_slave_0: entered allmulticast mode [ 26.242916][ T3314] bridge_slave_0: entered promiscuous mode [ 26.265467][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.272625][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.280499][ T3314] bridge_slave_1: entered allmulticast mode [ 26.286853][ T3314] bridge_slave_1: entered promiscuous mode [ 26.297326][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.304549][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.311780][ T3312] bridge_slave_0: entered allmulticast mode [ 26.318256][ T3312] bridge_slave_0: entered promiscuous mode [ 26.338309][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.351372][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.358410][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.365542][ T3312] bridge_slave_1: entered allmulticast mode [ 26.371844][ T3312] bridge_slave_1: entered promiscuous mode [ 26.379053][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.388218][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.395315][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.402554][ T3309] bridge_slave_0: entered allmulticast mode [ 26.409005][ T3309] bridge_slave_0: entered promiscuous mode [ 26.415559][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.422696][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.429848][ T3309] bridge_slave_1: entered allmulticast mode [ 26.436316][ T3309] bridge_slave_1: entered promiscuous mode [ 26.443251][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.457741][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.472382][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.495413][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.514831][ T3305] team0: Port device team_slave_0 added [ 26.534492][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.544200][ T3305] team0: Port device team_slave_1 added [ 26.555712][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.565571][ T3304] team0: Port device team_slave_0 added [ 26.577612][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.591993][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.601267][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.608233][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.634171][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.645451][ T3304] team0: Port device team_slave_1 added [ 26.656284][ T3314] team0: Port device team_slave_0 added [ 26.671718][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.678654][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.704647][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.722691][ T3314] team0: Port device team_slave_1 added [ 26.728557][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.735533][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.761427][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.782142][ T3309] team0: Port device team_slave_0 added [ 26.788580][ T3309] team0: Port device team_slave_1 added [ 26.799392][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.806357][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.832401][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.843706][ T3312] team0: Port device team_slave_0 added [ 26.850302][ T3312] team0: Port device team_slave_1 added [ 26.870019][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.876962][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.902858][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.925415][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.932385][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.958347][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.974327][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.981386][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.007284][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.026794][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.033754][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.059660][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.081518][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.088451][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.114352][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.126817][ T3305] hsr_slave_0: entered promiscuous mode [ 27.132971][ T3305] hsr_slave_1: entered promiscuous mode [ 27.155428][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.162440][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.188419][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.213579][ T3304] hsr_slave_0: entered promiscuous mode [ 27.219752][ T3304] hsr_slave_1: entered promiscuous mode [ 27.225428][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 27.231193][ T3304] Cannot create hsr debugfs directory [ 27.245821][ T3309] hsr_slave_0: entered promiscuous mode [ 27.251696][ T3309] hsr_slave_1: entered promiscuous mode [ 27.257656][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.263400][ T3309] Cannot create hsr debugfs directory [ 27.286172][ T3314] hsr_slave_0: entered promiscuous mode [ 27.292158][ T3314] hsr_slave_1: entered promiscuous mode [ 27.297836][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.303687][ T3314] Cannot create hsr debugfs directory [ 27.320652][ T3312] hsr_slave_0: entered promiscuous mode [ 27.326685][ T3312] hsr_slave_1: entered promiscuous mode [ 27.332651][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.338374][ T3312] Cannot create hsr debugfs directory [ 27.504305][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.514541][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.524527][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.534493][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.547391][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.556350][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.564660][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.573657][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.602058][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.610808][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.620273][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.629111][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.670185][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.701008][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.713833][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.723374][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.731574][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.740312][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.748758][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.757356][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.766332][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.794329][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.802601][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.814650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.821798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.835376][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.842483][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.857836][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.891023][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.905223][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.915229][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.922316][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.934110][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.961009][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.968060][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.976756][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.983825][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.995442][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.013012][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.020078][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.046738][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.061666][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.074343][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.081441][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.100203][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.110126][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.119816][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.126951][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.142075][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.149190][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.172197][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.179299][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.192830][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.237199][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.314191][ T3314] veth0_vlan: entered promiscuous mode [ 28.347965][ T3314] veth1_vlan: entered promiscuous mode [ 28.366196][ T3305] veth0_vlan: entered promiscuous mode [ 28.387737][ T3305] veth1_vlan: entered promiscuous mode [ 28.397959][ T3304] veth0_vlan: entered promiscuous mode [ 28.404739][ T3314] veth0_macvtap: entered promiscuous mode [ 28.413172][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.423727][ T3314] veth1_macvtap: entered promiscuous mode [ 28.433483][ T3304] veth1_vlan: entered promiscuous mode [ 28.440935][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.472250][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.480333][ T3304] veth0_macvtap: entered promiscuous mode [ 28.486941][ T3305] veth0_macvtap: entered promiscuous mode [ 28.498541][ T3304] veth1_macvtap: entered promiscuous mode [ 28.506295][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.520478][ T3305] veth1_macvtap: entered promiscuous mode [ 28.532109][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.544576][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.555942][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.564130][ T1452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.579960][ T1452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.588668][ T1452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.601014][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.613384][ T3309] veth0_vlan: entered promiscuous mode [ 28.620501][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.628654][ T3309] veth1_vlan: entered promiscuous mode [ 28.636071][ T1452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.660267][ T1452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.669214][ T1452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.677901][ T1452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.694237][ T3309] veth0_macvtap: entered promiscuous mode [ 28.733529][ T1452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.746759][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.764103][ T1452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.780521][ T1452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.792154][ T1452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.802636][ T3309] veth1_macvtap: entered promiscuous mode [ 28.814964][ T3475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.825625][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.845893][ T3312] veth0_vlan: entered promiscuous mode [ 28.858665][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.872677][ T3312] veth1_vlan: entered promiscuous mode [ 28.894172][ T3480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6'. [ 28.904815][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.925240][ T3312] veth0_macvtap: entered promiscuous mode [ 28.941277][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.960392][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970250][ T3312] veth1_macvtap: entered promiscuous mode [ 28.984235][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.016147][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.030464][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.038753][ T3491] ======================================================= [ 29.038753][ T3491] WARNING: The mand mount option has been deprecated and [ 29.038753][ T3491] and is ignored by this kernel. Remove the mand [ 29.038753][ T3491] option from the mount to silence this warning. [ 29.038753][ T3491] ======================================================= [ 29.081920][ T3490] loop3: detected capacity change from 0 to 1024 [ 29.114898][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.145884][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.158316][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.185266][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.216363][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.271967][ T3503] syzkaller0: entered promiscuous mode [ 29.277476][ T3503] syzkaller0: entered allmulticast mode [ 29.305336][ T12] syzkaller0: tun_net_xmit 48 [ 29.312173][ T3490] bridge0: port 3(bond0) entered blocking state [ 29.318461][ T3490] bridge0: port 3(bond0) entered disabled state [ 29.344400][ T3490] bond0: entered allmulticast mode [ 29.349605][ T3490] bond_slave_0: entered allmulticast mode [ 29.355349][ T3490] bond_slave_1: entered allmulticast mode [ 29.362752][ T3490] bond0: entered promiscuous mode [ 29.367892][ T3490] bond_slave_0: entered promiscuous mode [ 29.373620][ T3490] bond_slave_1: entered promiscuous mode [ 29.380021][ T3490] bridge0: port 3(bond0) entered blocking state [ 29.386368][ T3490] bridge0: port 3(bond0) entered forwarding state [ 29.393352][ T3503] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 29.393453][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 29.393515][ T29] audit: type=1326 audit(1758066087.280:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 29.399222][ T3503] syzkaller0: Linktype set failed because interface is up [ 29.447887][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.580890][ T29] audit: type=1400 audit(1758066087.470:137): avc: denied { create } for pid=3522 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.603619][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 29.613521][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 29.623927][ T29] audit: type=1400 audit(1758066087.490:138): avc: denied { write } for pid=3522 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.647591][ T29] audit: type=1400 audit(1758066087.530:139): avc: denied { create } for pid=3519 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.667098][ T29] audit: type=1400 audit(1758066087.530:140): avc: denied { ioctl } for pid=3519 comm="syz.3.19" path="socket:[4754]" dev="sockfs" ino=4754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.769036][ T29] audit: type=1400 audit(1758066087.650:141): avc: denied { create } for pid=3524 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 29.788684][ T29] audit: type=1400 audit(1758066087.650:142): avc: denied { read write } for pid=3524 comm="syz.4.22" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.811818][ T29] audit: type=1400 audit(1758066087.650:143): avc: denied { open } for pid=3524 comm="syz.4.22" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.835541][ T29] audit: type=1400 audit(1758066087.660:144): avc: denied { write } for pid=3524 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 29.893170][ T29] audit: type=1400 audit(1758066087.780:145): avc: denied { create } for pid=3530 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.927822][ T3535] loop4: detected capacity change from 0 to 128 [ 29.944740][ T3537] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 29.962790][ T3539] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure [ 29.976177][ T3535] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.009924][ T3535] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.070655][ T3551] netlink: 96 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.094681][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.275184][ T3562] syz.1.38 (3562) used greatest stack depth: 10896 bytes left [ 30.826446][ T3605] Set syz1 is full, maxelem 65536 reached [ 30.953374][ T3635] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.430595][ T3706] netlink: 104 bytes leftover after parsing attributes in process `syz.3.96'. [ 31.572457][ T3699] syz.1.94 (3699) used greatest stack depth: 10872 bytes left [ 31.678550][ T3735] netlink: 'syz.1.104': attribute type 3 has an invalid length. [ 31.686354][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 31.697195][ T3732] syz.0.103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.771895][ T3746] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 32.043221][ T3774] smc: net device bond0 applied user defined pnetid SYZ0 [ 32.047261][ T3756] syz.1.112 (3756) used greatest stack depth: 9440 bytes left [ 32.050725][ T3774] smc: net device bond0 erased user defined pnetid SYZ0 [ 32.201547][ T3794] loop2: detected capacity change from 0 to 512 [ 32.222963][ T3794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.237861][ T3794] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.342868][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.542923][ T3821] process 'syz.2.140' launched '/dev/fd/5' with NULL argv: empty string added [ 32.631429][ T3835] netlink: 96 bytes leftover after parsing attributes in process `syz.2.146'. [ 32.677209][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 32.686187][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 32.708423][ T3843] Zero length message leads to an empty skb [ 32.708423][ T1452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.742680][ T1452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.753787][ T1452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.769828][ T1452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.809423][ T3859] ref_ctr_offset mismatch. inode: 0xee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 32.932743][ T3866] vhci_hcd: invalid port number 96 [ 32.938014][ T3866] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 33.027226][ T3878] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 33.060354][ T3880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3880 comm=syz.2.168 [ 33.072947][ T3880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3880 comm=syz.2.168 [ 33.098571][ T3882] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 33.106673][ T3885] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET) [ 33.144852][ T3889] loop0: detected capacity change from 0 to 1024 [ 33.170712][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.201612][ T3889] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.172: Allocating blocks 497-513 which overlap fs metadata [ 33.226940][ T3889] EXT4-fs (loop0): pa ffff8881075ce0e0: logic 16, phys. 145, len 23 [ 33.235452][ T3889] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 33.311372][ T3889] syz.0.172 (3889) used greatest stack depth: 9128 bytes left [ 33.333861][ C0] hrtimer: interrupt took 27883 ns [ 33.414505][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.782256][ T3923] loop2: detected capacity change from 0 to 1024 [ 33.818188][ T3923] EXT4-fs: Invalid want_extra_isize 13 [ 33.966365][ T3944] netem: change failed [ 34.054891][ T3948] __nla_validate_parse: 2 callbacks suppressed [ 34.054906][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 34.113402][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 34.154604][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 34.175725][ T3952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.206997][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 34.239424][ T3956] loop4: detected capacity change from 0 to 8192 [ 34.254122][ T3952] bond1 (unregistering): Released all slaves [ 34.463264][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 34.524799][ T3975] loop4: detected capacity change from 0 to 512 [ 34.588080][ T3975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.623954][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 34.623967][ T29] audit: type=1400 audit(1758066092.510:359): avc: denied { block_suspend } for pid=3983 comm="syz.2.213" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.652676][ T3975] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.677362][ T3973] loop1: detected capacity change from 0 to 8192 [ 34.682752][ T29] audit: type=1400 audit(1758066092.560:360): avc: denied { create } for pid=3974 comm="syz.4.210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.727433][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.747591][ T3973] loop1: p1 p2[DM] p4 [ 34.769181][ T3973] loop1: p1 size 196608 extends beyond EOD, truncated [ 34.780406][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 34.789598][ T3979] netlink: 312 bytes leftover after parsing attributes in process `syz.3.212'. [ 34.798542][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 34.816419][ T3973] loop1: p2 start 4292936063 is beyond EOD, truncated [ 34.823273][ T3973] loop1: p4 size 50331648 extends beyond EOD, truncated [ 34.844826][ T29] audit: type=1400 audit(1758066092.720:361): avc: denied { write } for pid=3988 comm="syz.4.215" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.907702][ T29] audit: type=1400 audit(1758066092.790:362): avc: denied { create } for pid=3993 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.927035][ T29] audit: type=1400 audit(1758066092.790:363): avc: denied { connect } for pid=3993 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.946366][ T29] audit: type=1400 audit(1758066092.790:364): avc: denied { ioctl } for pid=3993 comm="syz.1.216" path="socket:[6515]" dev="sockfs" ino=6515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.970943][ T29] audit: type=1400 audit(1758066092.790:365): avc: denied { write } for pid=3993 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.011707][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 35.024587][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.039211][ T3996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.121319][ T3996] wireguard0: entered promiscuous mode [ 35.126819][ T3996] wireguard0: entered allmulticast mode [ 35.325214][ T4012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 35.407620][ T29] audit: type=1326 audit(1758066093.290:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40f97eba9 code=0x7ffc0000 [ 35.431569][ T4015] loop1: detected capacity change from 0 to 128 [ 35.438534][ T4015] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.464146][ T29] audit: type=1326 audit(1758066093.290:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa40f97eba9 code=0x7ffc0000 [ 35.479597][ T4015] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.496104][ T29] audit: type=1326 audit(1758066093.290:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa40f97ebe3 code=0x7ffc0000 [ 35.581413][ T1452] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.633501][ T4028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.660122][ T4030] loop1: detected capacity change from 0 to 1024 [ 35.707271][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.716084][ T4030] EXT4-fs: Ignoring removed orlov option [ 35.742026][ T4030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.754901][ T4030] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.790121][ T4030] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.230: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.805711][ T4030] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 35.818092][ T4030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.818092][ T4030] [ 35.833582][ T4040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 35.842796][ T4030] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.230: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.870595][ T4030] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 35.882998][ T4030] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.882998][ T4030] [ 35.961828][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.982945][ T4049] bridge0: entered allmulticast mode [ 35.988712][ T4049] bridge_slave_1: left allmulticast mode [ 35.994452][ T4049] bridge_slave_1: left promiscuous mode [ 36.000200][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.009912][ T4049] bridge_slave_0: left allmulticast mode [ 36.015580][ T4049] bridge_slave_0: left promiscuous mode [ 36.021346][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.033878][ T4049] bridge0 (unregistering): left allmulticast mode [ 36.786214][ T4061] Set syz1 is full, maxelem 65536 reached [ 37.188354][ T4106] loop4: detected capacity change from 0 to 512 [ 37.214182][ T4106] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.261: error while reading EA inode 32 err=-116 [ 37.240289][ T4106] EXT4-fs (loop4): Remounting filesystem read-only [ 37.244668][ T4092] Set syz1 is full, maxelem 65536 reached [ 37.246884][ T4106] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.265718][ T4106] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 37.275894][ T4106] EXT4-fs (loop4): 1 orphan inode deleted [ 37.282906][ T4106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.296782][ T4106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.438858][ T3399] IPVS: starting estimator thread 0... [ 37.532819][ T4130] IPVS: using max 2688 ests per chain, 134400 per kthread [ 37.588514][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4146 comm=syz.3.277 [ 37.746140][ T4154] wireguard0: entered promiscuous mode [ 37.751675][ T4154] wireguard0: entered allmulticast mode [ 37.757321][ T36] IPVS: starting estimator thread 0... [ 37.808222][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.820752][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.840386][ T4166] netlink: 'syz.4.285': attribute type 12 has an invalid length. [ 37.861862][ T4160] IPVS: using max 2640 ests per chain, 132000 per kthread [ 37.899533][ T4174] netlink: 'syz.4.285': attribute type 12 has an invalid length. [ 38.211137][ T4213] wireguard0: entered promiscuous mode [ 38.216637][ T4213] wireguard0: entered allmulticast mode [ 38.850411][ T4270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4270 comm=syz.3.331 [ 38.959685][ T4281] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 38.959685][ T4281] program syz.3.335 not setting count and/or reply_len properly [ 39.212995][ T4298] loop2: detected capacity change from 0 to 128 [ 39.221046][ T4298] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.250834][ T4302] loop0: detected capacity change from 0 to 1024 [ 39.271441][ T4298] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.291989][ T4302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.316815][ T4306] loop1: detected capacity change from 0 to 1024 [ 39.330693][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.339202][ T4306] loop1: detected capacity change from 0 to 2048 [ 39.351790][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.379075][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.379663][ T4306] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.346: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.434318][ T4318] netlink: 'syz.2.347': attribute type 39 has an invalid length. [ 39.458458][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.521838][ T4327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 39.528425][ T4327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.535931][ T4327] vhci_hcd vhci_hcd.0: Device attached [ 39.564112][ T4329] vhci_hcd: cannot find the pending unlink 2869 [ 39.573223][ T4329] vhci_hcd: connection closed [ 39.577145][ T51] vhci_hcd: stop threads [ 39.586121][ T51] vhci_hcd: release socket [ 39.590565][ T51] vhci_hcd: disconnect device [ 39.837218][ T4348] mmap: syz.4.360 (4348) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.880410][ T4350] wg2: entered promiscuous mode [ 39.885327][ T4350] wg2: entered allmulticast mode [ 39.906487][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 39.906500][ T29] audit: type=1326 audit(1758066097.790:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 39.937172][ T29] audit: type=1326 audit(1758066097.790:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 39.960778][ T29] audit: type=1326 audit(1758066097.790:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 39.984014][ T29] audit: type=1326 audit(1758066097.790:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.007384][ T29] audit: type=1326 audit(1758066097.790:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.030431][ T29] audit: type=1326 audit(1758066097.790:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.053788][ T29] audit: type=1326 audit(1758066097.870:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.077123][ T29] audit: type=1326 audit(1758066097.870:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.100345][ T29] audit: type=1326 audit(1758066097.870:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.123573][ T29] audit: type=1326 audit(1758066097.870:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 40.407743][ T4368] loop3: detected capacity change from 0 to 1024 [ 40.447122][ T4368] loop3: detected capacity change from 0 to 2048 [ 40.502688][ T4368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.524138][ T4361] Set syz1 is full, maxelem 65536 reached [ 40.530215][ T4368] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.371: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.583898][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.657269][ T4382] ref_ctr_offset mismatch. inode: 0x19a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 40.710009][ T4391] __nla_validate_parse: 3 callbacks suppressed [ 40.710026][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 40.750284][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 40.826400][ T4404] loop4: detected capacity change from 0 to 1024 [ 40.843971][ T4411] loop3: detected capacity change from 0 to 1024 [ 40.855430][ T4404] loop4: detected capacity change from 0 to 2048 [ 40.856475][ T4409] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 40.869564][ T4409] netlink: 'syz.1.386': attribute type 9 has an invalid length. [ 40.877225][ T4409] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.386'. [ 40.896487][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.912919][ T4404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.941001][ T4404] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.385: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.002509][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.060009][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.140570][ T4450] loop2: detected capacity change from 0 to 1024 [ 41.188770][ T4450] loop2: detected capacity change from 0 to 2048 [ 41.227593][ T4450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.281158][ T4450] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.405: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.344713][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.398693][ T4477] loop1: detected capacity change from 0 to 1024 [ 41.430063][ T4477] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.441053][ T4477] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.480000][ T4477] JBD2: no valid journal superblock found [ 41.485758][ T4477] EXT4-fs (loop1): Could not load journal inode [ 41.512925][ T4477] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 41.539281][ T3399] kernel write not supported for file /191/attr/exec (pid: 3399 comm: kworker/1:3) [ 41.577548][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 41.595354][ T4483] loop3: detected capacity change from 0 to 8192 [ 41.643198][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 41.655188][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 41.665746][ T4506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 41.745731][ T4517] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 41.768949][ T4519] netlink: 'syz.1.433': attribute type 39 has an invalid length. [ 42.004576][ T4538] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 42.012377][ T4538] netlink: 'syz.2.441': attribute type 9 has an invalid length. [ 42.020360][ T4538] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.441'. [ 42.074104][ T4548] loop2: detected capacity change from 0 to 1024 [ 42.081120][ T4548] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.092169][ T4548] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.104660][ T4548] JBD2: no valid journal superblock found [ 42.110534][ T4548] EXT4-fs (loop2): Could not load journal inode [ 42.122573][ T4548] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.195313][ T4556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.450'. [ 42.204546][ T4556] netem: change failed [ 42.297425][ T4568] loop1: detected capacity change from 0 to 1024 [ 42.304294][ T4568] EXT4-fs: Ignoring removed nobh option [ 42.309875][ T4568] EXT4-fs: Ignoring removed bh option [ 42.318117][ T4569] netlink: 240 bytes leftover after parsing attributes in process `syz.0.451'. [ 42.326682][ T4568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.347590][ T4568] ext4: Unknown parameter 'GPL' [ 42.365067][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.442982][ T4581] loop1: detected capacity change from 0 to 1024 [ 42.450394][ T4581] EXT4-fs: Ignoring removed bh option [ 42.455846][ T4581] EXT4-fs: inline encryption not supported [ 42.462073][ T4581] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.473528][ T4581] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.482093][ T4582] loop0: detected capacity change from 0 to 1024 [ 42.482804][ T4581] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.460: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.489614][ T4582] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.503768][ T4581] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.460: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.513835][ T4582] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.517428][ T4582] JBD2: no valid journal superblock found [ 42.531237][ T4581] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.460: Failed to acquire dquot type 0 [ 42.537831][ T4582] EXT4-fs (loop0): Could not load journal inode [ 42.568748][ T4581] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.583649][ T4581] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.460: mark_inode_dirty error [ 42.591971][ T4582] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.596490][ T4581] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.614811][ T4581] EXT4-fs (loop1): 1 orphan inode deleted [ 42.621210][ T4581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.634313][ T41] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.659942][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 42.680660][ T4581] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.460: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.717444][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.738563][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 42.854891][ T4601] loop4: detected capacity change from 0 to 8192 [ 42.916759][ T4611] $H: renamed from bond0 (while UP) [ 42.926038][ T4611] bridge0: port 3($H) entered disabled state [ 43.123648][ T4631] loop2: detected capacity change from 0 to 512 [ 43.132407][ T4633] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 43.142286][ T4631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.156859][ T4631] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.179470][ T4631] EXT4-fs (loop2): 1 truncate cleaned up [ 43.185446][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.240278][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.547582][ T4660] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.591862][ T4669] IPv4: Oversized IP packet from 127.202.26.0 [ 43.615239][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 43.716982][ T4682] loop0: detected capacity change from 0 to 1024 [ 43.726121][ T4682] EXT4-fs: Ignoring removed nobh option [ 43.731756][ T4682] EXT4-fs: Ignoring removed bh option [ 43.742132][ T4684] IPVS: Error joining to the multicast group [ 43.774588][ T4682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.831979][ T4682] ext4: Unknown parameter 'GPL' [ 43.874595][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.907047][ T4702] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.920044][ T4705] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 43.957739][ T4711] loop0: detected capacity change from 0 to 1024 [ 43.968025][ T4711] EXT4-fs: Ignoring removed bh option [ 43.974047][ T4711] EXT4-fs: inline encryption not supported [ 43.981466][ T4711] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.983951][ T4702] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.003626][ T4711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 44.014655][ T4711] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.511: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.030490][ T4711] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.511: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.047640][ T4711] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.511: Failed to acquire dquot type 0 [ 44.061203][ T4711] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 44.071090][ T4711] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.511: mark_inode_dirty error [ 44.083061][ T4711] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.094150][ T4711] EXT4-fs (loop0): 1 orphan inode deleted [ 44.094607][ T4702] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.100863][ T4711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.122731][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.146831][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 44.162708][ T4711] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.511: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.201315][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.211959][ T4702] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.215835][ T4726] loop2: detected capacity change from 0 to 1024 [ 44.234678][ T4726] EXT4-fs: Ignoring removed nobh option [ 44.240406][ T4726] EXT4-fs: Ignoring removed bh option [ 44.253370][ T4726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.289729][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.298147][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.316885][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.338873][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.361041][ T4739] block device autoloading is deprecated and will be removed. [ 44.371381][ T4726] ext4: Unknown parameter 'GPL' [ 44.414860][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.455076][ T4742] loop4: detected capacity change from 0 to 1024 [ 44.462554][ T4742] EXT4-fs: Ignoring removed nobh option [ 44.468312][ T4742] EXT4-fs: Ignoring removed bh option [ 44.501247][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.519597][ T4742] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.721926][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.823242][ T4780] IPv4: Oversized IP packet from 127.202.26.0 [ 44.938005][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 44.938019][ T29] audit: type=1326 audit(1758066102.820:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 44.977380][ T29] audit: type=1326 audit(1758066102.830:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 45.000679][ T29] audit: type=1326 audit(1758066102.830:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 45.024067][ T29] audit: type=1326 audit(1758066102.830:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 45.047360][ T29] audit: type=1326 audit(1758066102.830:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 45.070721][ T29] audit: type=1326 audit(1758066102.840:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 45.094158][ T29] audit: type=1326 audit(1758066102.860:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 45.117544][ T29] audit: type=1400 audit(1758066102.860:806): avc: denied { tracepoint } for pid=4794 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.137158][ T29] audit: type=1326 audit(1758066102.860:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 45.160430][ T29] audit: type=1326 audit(1758066102.860:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 45.185787][ T4799] loop9: detected capacity change from 0 to 7 [ 45.192100][ T4799] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.205624][ T4799] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.213700][ T4799] loop9: unable to read partition table [ 45.238888][ T4799] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 45.238888][ T4799] ) failed (rc=-5) [ 45.824189][ T4871] loop0: detected capacity change from 0 to 512 [ 45.853055][ T4871] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.887484][ T4882] __nla_validate_parse: 6 callbacks suppressed [ 45.887500][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 45.900819][ T4871] EXT4-fs (loop0): mount failed [ 45.950128][ T4895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.972888][ T4893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.593'. [ 45.987726][ T4893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.593'. [ 46.143163][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'. [ 46.297031][ T4959] loop2: detected capacity change from 0 to 1024 [ 46.304155][ T4959] EXT4-fs: Ignoring removed nobh option [ 46.309951][ T4959] EXT4-fs: Ignoring removed bh option [ 46.327194][ T4959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.348738][ T4959] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.448137][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.545868][ T5008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.631'. [ 46.559199][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 47.115692][ T5045] loop1: detected capacity change from 0 to 128 [ 47.148314][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.148314][ T51] loop1: rw=1, sector=133, nr_sectors = 8 limit=128 [ 47.162082][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.162082][ T51] loop1: rw=1, sector=149, nr_sectors = 8 limit=128 [ 47.175767][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.175767][ T51] loop1: rw=1, sector=144, nr_sectors = 1 limit=128 [ 47.189207][ T51] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 47.197867][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.197867][ T51] loop1: rw=1, sector=145, nr_sectors = 1 limit=128 [ 47.211293][ T51] Buffer I/O error on dev loop1, logical block 145, lost async page write [ 47.220112][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.220112][ T51] loop1: rw=1, sector=146, nr_sectors = 1 limit=128 [ 47.233461][ T51] Buffer I/O error on dev loop1, logical block 146, lost async page write [ 47.242318][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.242318][ T51] loop1: rw=1, sector=147, nr_sectors = 1 limit=128 [ 47.255664][ T51] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 47.264376][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.264376][ T51] loop1: rw=1, sector=148, nr_sectors = 1 limit=128 [ 47.277714][ T51] Buffer I/O error on dev loop1, logical block 148, lost async page write [ 47.286562][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.286562][ T51] loop1: rw=1, sector=157, nr_sectors = 1 limit=128 [ 47.300037][ T51] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 47.308738][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.308738][ T51] loop1: rw=1, sector=158, nr_sectors = 1 limit=128 [ 47.322128][ T51] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 47.330998][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.330998][ T51] loop1: rw=1, sector=159, nr_sectors = 1 limit=128 [ 47.344453][ T51] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 47.660130][ T5069] loop3: detected capacity change from 0 to 512 [ 47.681458][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.724219][ T5069] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.861579][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.878576][ T5087] loop0: detected capacity change from 0 to 1024 [ 47.886766][ T5087] EXT4-fs: Ignoring removed bh option [ 47.893404][ T5091] netlink: 'syz.4.669': attribute type 10 has an invalid length. [ 47.893918][ T5087] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.901511][ T5091] team0: Device dummy0 is up. Set it down before adding it as a team port [ 47.932128][ T5094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.671'. [ 47.944006][ T5087] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.953480][ T5087] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.668: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.970763][ T5087] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.668: Failed to acquire dquot type 0 [ 47.983536][ T5087] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.668: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.006369][ T5087] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.668: Invalid inode bitmap blk 0 in block_group 0 [ 48.019913][ T5087] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 48.028504][ T1452] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.047368][ T5087] EXT4-fs (loop0): 1 orphan inode deleted [ 48.054468][ T1452] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 48.066462][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.082450][ T5087] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (18333!=0) [ 48.101274][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.119849][ T5109] loop3: detected capacity change from 0 to 512 [ 48.139503][ T5109] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.147631][ T5109] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.155664][ T5109] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.679: corrupted inode contents [ 48.167968][ T5109] EXT4-fs (loop3): Remounting filesystem read-only [ 48.176661][ T5111] vhci_hcd: invalid port number 96 [ 48.181866][ T5111] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 48.185899][ T5109] EXT4-fs (loop3): 1 truncate cleaned up [ 48.195040][ T167] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.205579][ T167] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.216224][ T167] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.227392][ T5115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.230561][ T5117] loop4: detected capacity change from 0 to 164 [ 48.238349][ T5109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.281731][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.301921][ T5115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.383106][ T5115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.417339][ T5141] netlink: 96 bytes leftover after parsing attributes in process `syz.3.692'. [ 48.437287][ T5115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.495244][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.511643][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.530765][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.540976][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.608983][ T5156] loop3: detected capacity change from 0 to 2048 [ 48.642987][ T5156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.672910][ T5156] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.008367][ T23] Process accounting resumed [ 49.059467][ T5197] loop1: detected capacity change from 0 to 512 [ 49.068562][ T5197] $H: renamed from bond0 (while UP) [ 49.077260][ T5197] $H: entered promiscuous mode [ 49.082380][ T5197] bond_slave_0: entered promiscuous mode [ 49.088168][ T5197] bond_slave_1: entered promiscuous mode [ 49.426261][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.493516][ T5222] loop3: detected capacity change from 0 to 512 [ 49.500535][ T5222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.512592][ T5222] EXT4-fs (loop3): 1 truncate cleaned up [ 49.518569][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.940591][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 49.940605][ T29] audit: type=1400 audit(1758066107.830:1203): avc: denied { load_policy } for pid=5239 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.999601][ T5242] bond1: entered promiscuous mode [ 50.004669][ T5242] bond1: entered allmulticast mode [ 50.010231][ T5242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.052947][ T5242] bond1 (unregistering): Released all slaves [ 50.062709][ T29] audit: type=1400 audit(1758066107.950:1204): avc: denied { ioctl } for pid=5244 comm="syz.2.738" path="socket:[10053]" dev="sockfs" ino=10053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.091617][ T29] audit: type=1400 audit(1758066107.980:1205): avc: denied { connect } for pid=5246 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.122785][ T29] audit: type=1400 audit(1758066108.000:1206): avc: denied { write } for pid=5246 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.162320][ T5252] loop0: detected capacity change from 0 to 512 [ 50.193909][ T5252] Quota error (device loop0): v2_read_file_info: Free block number 4294967294 out of range (1, 6). [ 50.205909][ T5252] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.229604][ T5252] EXT4-fs (loop0): mount failed [ 50.235738][ T29] audit: type=1400 audit(1758066108.110:1207): avc: denied { create } for pid=5260 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.255339][ T29] audit: type=1400 audit(1758066108.120:1208): avc: denied { connect } for pid=5260 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.278935][ T29] audit: type=1400 audit(1758066108.160:1209): avc: denied { watch watch_reads } for pid=5262 comm="syz.1.745" path="/147/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.338595][ T5267] loop2: detected capacity change from 0 to 512 [ 50.367918][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.383915][ T5267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.398087][ T5267] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.411486][ T29] audit: type=1400 audit(1758066108.300:1210): avc: denied { setattr } for pid=5266 comm="syz.2.747" path="/164/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.445924][ T5267] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.747: corrupted inode contents [ 50.457975][ T5267] EXT4-fs (loop2): Remounting filesystem read-only [ 50.464727][ T5267] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 50.499849][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.511970][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 50.521025][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 50.553466][ T5288] loop2: detected capacity change from 0 to 1024 [ 50.585499][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.601810][ T29] audit: type=1400 audit(1758066108.490:1211): avc: denied { ioctl } for pid=5299 comm="syz.4.761" path="socket:[10128]" dev="sockfs" ino=10128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.628320][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.635613][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.649618][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.669832][ T5303] hub 9-0:1.0: USB hub found [ 50.675536][ T5303] hub 9-0:1.0: 8 ports detected [ 50.695404][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.705322][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.754900][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.772222][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.781159][ T5309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5309 comm=syz.3.765 [ 50.788599][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.794426][ T5307] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 50.845095][ T5311] loop1: detected capacity change from 0 to 512 [ 50.859052][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.886954][ T5311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.899608][ T5311] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.001767][ T5334] pimreg: entered allmulticast mode [ 51.012305][ T5334] pimreg: left allmulticast mode [ 51.075765][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.277529][ T5350] loop2: detected capacity change from 0 to 7 [ 51.418482][ T5355] __nla_validate_parse: 3 callbacks suppressed [ 51.418497][ T5355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 51.856183][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 51.926344][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 51.937298][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 51.948270][ T5371] loop1: detected capacity change from 0 to 8192 [ 52.019875][ T5371] loop1: p1 p2 p3 p4 [ 52.024689][ T5371] loop1: p2 start 151000334 is beyond EOD, truncated [ 52.031425][ T5371] loop1: p3 start 331777 is beyond EOD, truncated [ 52.037829][ T5371] loop1: p4 size 263168 extends beyond EOD, truncated [ 52.205842][ T5413] netlink: 76 bytes leftover after parsing attributes in process `syz.3.811'. [ 52.224183][ T5415] 9pnet: p9_errstr2errno: server reported unknown error [ 52.352814][ T5433] loop3: detected capacity change from 0 to 512 [ 52.360600][ T5433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.371188][ T5436] loop2: detected capacity change from 0 to 128 [ 52.380917][ T5433] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.821: invalid indirect mapped block 4294967295 (level 0) [ 52.401605][ T5433] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.821: invalid indirect mapped block 4294967295 (level 1) [ 52.427780][ T5433] EXT4-fs (loop3): 1 orphan inode deleted [ 52.433562][ T5433] EXT4-fs (loop3): 1 truncate cleaned up [ 52.441190][ T12] bio_check_eod: 8 callbacks suppressed [ 52.441203][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.441203][ T12] loop2: rw=1, sector=133, nr_sectors = 8 limit=128 [ 52.441951][ T5433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.460238][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.460238][ T12] loop2: rw=1, sector=149, nr_sectors = 8 limit=128 [ 52.486014][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.486014][ T12] loop2: rw=1, sector=144, nr_sectors = 1 limit=128 [ 52.499467][ T12] buffer_io_error: 6 callbacks suppressed [ 52.499479][ T12] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 52.513944][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.513944][ T12] loop2: rw=1, sector=145, nr_sectors = 1 limit=128 [ 52.514586][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.527250][ T12] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 52.527280][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.527280][ T12] loop2: rw=1, sector=146, nr_sectors = 1 limit=128 [ 52.527299][ T12] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 52.566745][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.566745][ T12] loop2: rw=1, sector=147, nr_sectors = 1 limit=128 [ 52.580176][ T12] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 52.588679][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.588679][ T12] loop2: rw=1, sector=148, nr_sectors = 1 limit=128 [ 52.602016][ T12] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 52.612870][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 52.622040][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.622040][ T12] loop2: rw=1, sector=157, nr_sectors = 1 limit=128 [ 52.635611][ T12] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 52.644633][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.644633][ T12] loop2: rw=1, sector=158, nr_sectors = 1 limit=128 [ 52.657992][ T12] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 52.666922][ T12] kworker/u8:0: attempt to access beyond end of device [ 52.666922][ T12] loop2: rw=1, sector=159, nr_sectors = 1 limit=128 [ 52.680261][ T12] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 52.689472][ T12] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.698035][ T12] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 52.709468][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 52.718976][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 52.734196][ T5447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.823'. [ 52.763538][ T5449] netlink: 96 bytes leftover after parsing attributes in process `syz.2.827'. [ 52.782708][ T5451] loop3: detected capacity change from 0 to 512 [ 52.800438][ T5451] EXT4-fs: Ignoring removed oldalloc option [ 52.807176][ T5451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.820866][ T5451] EXT4-fs (loop3): 1 truncate cleaned up [ 52.846461][ T5451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.901216][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.916105][ T5465] loop0: detected capacity change from 0 to 128 [ 52.927599][ T5464] vlan2: entered allmulticast mode [ 52.952366][ T5464] dummy0: entered allmulticast mode [ 52.998689][ T5477] loop7: detected capacity change from 0 to 7 [ 53.005027][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 53.014487][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 53.023805][ T5477] loop7: unable to read partition table [ 53.029666][ T5477] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 53.050242][ T5479] loop0: detected capacity change from 0 to 164 [ 53.157310][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.164599][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.291641][ T5489] wg2: left promiscuous mode [ 53.330594][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.449523][ T167] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.533514][ T167] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.545463][ T167] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.563134][ T167] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.635389][ T5536] unsupported nla_type 52263 [ 53.705163][ T5546] loop0: detected capacity change from 0 to 1024 [ 53.753723][ T5546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.766217][ T5546] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.787603][ T5550] hub 9-0:1.0: USB hub found [ 53.792840][ T5550] hub 9-0:1.0: 8 ports detected [ 53.830988][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 13) [ 53.849645][ T5546] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 53.862028][ T5546] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.862028][ T5546] [ 53.874386][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.890598][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.919026][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.949902][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.965092][ T5545] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.983731][ T5545] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.998831][ T5545] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 54.013270][ T5545] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 54.027566][ T5546] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.867: lblock 3 mapped to illegal pblock 3 (length 1) [ 54.336577][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.368530][ T5600] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 54.389903][ T5600] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 54.445328][ T5612] hub 9-0:1.0: USB hub found [ 54.451679][ T5612] hub 9-0:1.0: 8 ports detected [ 54.811113][ T5640] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 54.943477][ T5647] loop2: detected capacity change from 0 to 512 [ 54.960166][ T5647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.973456][ T5647] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.002609][ T5651] IPv4: Oversized IP packet from 127.202.26.0 [ 55.054583][ T5658] netlink: 'syz.1.913': attribute type 13 has an invalid length. [ 55.065769][ T5658] gretap0: refused to change device tx_queue_len [ 55.072933][ T5658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.108193][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.151477][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 55.151574][ T29] audit: type=1326 audit(1758066113.040:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.181695][ T29] audit: type=1326 audit(1758066113.040:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.205118][ T29] audit: type=1326 audit(1758066113.050:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.228485][ T29] audit: type=1326 audit(1758066113.050:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.251778][ T29] audit: type=1326 audit(1758066113.050:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.275167][ T29] audit: type=1326 audit(1758066113.050:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.298477][ T29] audit: type=1326 audit(1758066113.060:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.322000][ T29] audit: type=1326 audit(1758066113.060:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.362009][ T29] audit: type=1326 audit(1758066113.150:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.385596][ T29] audit: type=1326 audit(1758066113.160:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6ba2eba9 code=0x7ffc0000 [ 55.875631][ T5704] rdma_op ffff8881050f7d80 conn xmit_rdma 0000000000000000 [ 55.973386][ T5710] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 55.981090][ T5710] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 55.998687][ T5710] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 56.006391][ T5710] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 56.020835][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 56.289256][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.296451][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.326397][ T5686] bridge_slave_0: entered allmulticast mode [ 56.339595][ T5686] bridge_slave_0: entered promiscuous mode [ 56.350086][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.357151][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.379924][ T5686] bridge_slave_1: entered allmulticast mode [ 56.389332][ T5686] bridge_slave_1: entered promiscuous mode [ 56.425350][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.450381][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.492427][ T5686] team0: Port device team_slave_0 added [ 56.499268][ T5686] team0: Port device team_slave_1 added [ 56.538074][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.545046][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.571037][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.586380][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.593808][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.620098][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.671244][ T5730] __nla_validate_parse: 9 callbacks suppressed [ 56.671258][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 56.698861][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 56.707737][ T5732] netlink: 'syz.3.939': attribute type 7 has an invalid length. [ 56.715413][ T5732] netlink: 'syz.3.939': attribute type 8 has an invalid length. [ 56.723053][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 56.746329][ T5686] hsr_slave_0: entered promiscuous mode [ 56.752551][ T5686] hsr_slave_1: entered promiscuous mode [ 56.758369][ T5686] debugfs: 'hsr0' already exists in 'hsr' [ 56.764100][ T5686] Cannot create hsr debugfs directory [ 56.769552][ T5730] bridge_slave_1: left allmulticast mode [ 56.775294][ T5730] bridge_slave_1: left promiscuous mode [ 56.781035][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.790186][ T5730] bridge_slave_0: left allmulticast mode [ 56.795841][ T5730] bridge_slave_0: left promiscuous mode [ 56.801552][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.956661][ T5740] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 56.972500][ T5686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.982869][ T5686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.020703][ T5740] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.053610][ T5686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.064082][ T5686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.134486][ T5686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.144809][ T5686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.204100][ T5686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.214494][ T5686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.284721][ T5758] loop0: detected capacity change from 0 to 8192 [ 57.348679][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 57.362030][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.372456][ T5686] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.382105][ T5686] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.403780][ T5686] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.468497][ T5686] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.538929][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.550881][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.567214][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.574360][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.585345][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.592443][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.610044][ T5686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.620514][ T5686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.677030][ T5812] lo speed is unknown, defaulting to 1000 [ 57.683020][ T5812] lo speed is unknown, defaulting to 1000 [ 57.690464][ T5812] lo speed is unknown, defaulting to 1000 [ 57.697036][ T5812] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.707590][ T5812] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.732825][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.747298][ T5812] lo speed is unknown, defaulting to 1000 [ 57.756409][ T5812] lo speed is unknown, defaulting to 1000 [ 57.762783][ T5812] lo speed is unknown, defaulting to 1000 [ 57.769394][ T5812] lo speed is unknown, defaulting to 1000 [ 57.776964][ T5812] lo speed is unknown, defaulting to 1000 [ 57.783978][ T5812] lo speed is unknown, defaulting to 1000 [ 57.826591][ T5686] veth0_vlan: entered promiscuous mode [ 57.844225][ T5686] veth1_vlan: entered promiscuous mode [ 57.874487][ T5686] veth0_macvtap: entered promiscuous mode [ 57.883296][ T5686] veth1_macvtap: entered promiscuous mode [ 57.896762][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.907421][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.918884][ T2648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927722][ T2648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.938367][ T2648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.950410][ T2648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.027322][ T5842] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 58.197932][ T5861] netlink: 64 bytes leftover after parsing attributes in process `syz.0.996'. [ 58.212864][ T5862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.261156][ T5862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.381187][ T5876] lo speed is unknown, defaulting to 1000 [ 58.496600][ T5888] lo speed is unknown, defaulting to 1000 [ 58.548263][ T5893] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1000'. [ 58.576872][ T5896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.694108][ T5896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.854882][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.864417][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.922201][ T5896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.949505][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.958504][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.976064][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.993540][ T5896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.017100][ T5924] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1009'. [ 59.030421][ T5926] loop1: detected capacity change from 0 to 256 [ 59.037959][ T5926] vfat: Unknown parameter '01777777777777777777777' [ 59.045922][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.098955][ T1452] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.117379][ T1452] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.135941][ T1452] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.157333][ T1452] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.193856][ T5935] loop0: detected capacity change from 0 to 512 [ 59.234394][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.265000][ T5935] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.387886][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.436195][ T5964] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1026'. [ 59.520074][ T5970] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 59.772826][ T6016] validate_nla: 1 callbacks suppressed [ 59.772843][ T6016] netlink: 'syz.3.1049': attribute type 5 has an invalid length. [ 59.831769][ T5862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.016005][ T6041] lo speed is unknown, defaulting to 1000 [ 60.022344][ T6039] loop0: detected capacity change from 0 to 2048 [ 60.079305][ T6039] loop0: p1 < > p4 [ 60.083804][ T6039] loop0: p4 size 8388608 extends beyond EOD, truncated [ 60.188644][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 60.188659][ T29] audit: type=1326 audit(1758066118.070:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.220239][ T29] audit: type=1326 audit(1758066118.110:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.243816][ T29] audit: type=1326 audit(1758066118.110:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.267224][ T29] audit: type=1326 audit(1758066118.110:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.299131][ T29] audit: type=1326 audit(1758066118.180:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.322589][ T29] audit: type=1326 audit(1758066118.180:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.346012][ T29] audit: type=1326 audit(1758066118.180:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.369432][ T29] audit: type=1326 audit(1758066118.180:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.395340][ T29] audit: type=1326 audit(1758066118.190:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.3.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 60.418814][ T29] audit: type=1400 audit(1758066118.190:1574): avc: denied { setattr } for pid=6052 comm="syz.3.1065" name="file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.472609][ T6056] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1067'. [ 60.550854][ T6068] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 60.558689][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1073'. [ 60.573487][ T6068] team0: Port device geneve1 added [ 60.579187][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.587467][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.596059][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.604947][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.650951][ T6073] syzkaller1: entered promiscuous mode [ 60.656446][ T6073] syzkaller1: entered allmulticast mode [ 60.770254][ T6081] loop0: detected capacity change from 0 to 2048 [ 60.790964][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.824047][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.843533][ T6089] 0{X: renamed from gretap0 [ 60.850462][ T6089] 0{X: entered allmulticast mode [ 60.856460][ T6089] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 61.070437][ T6111] loop4: detected capacity change from 0 to 512 [ 61.086036][ T6111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.119651][ T6111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 61.127738][ T6111] System zones: 0-2, 18-18, 34-34 [ 61.134697][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.147482][ T6111] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.170500][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.207609][ T6123] loop4: detected capacity change from 0 to 512 [ 61.216517][ T6123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.260515][ T6123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.294383][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.320245][ T6140] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 61.328195][ T6140] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 61.337384][ T6140] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 61.345222][ T6140] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 61.397574][ T6146] $H: left allmulticast mode [ 61.402522][ T6146] bond_slave_0: left allmulticast mode [ 61.408135][ T6146] bond_slave_1: left allmulticast mode [ 61.413919][ T6146] bridge0: port 3($H) entered disabled state [ 61.426040][ T6146] bridge_slave_1: left allmulticast mode [ 61.431792][ T6146] bridge_slave_1: left promiscuous mode [ 61.437654][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.449116][ T6146] bridge_slave_0: left allmulticast mode [ 61.454812][ T6146] bridge_slave_0: left promiscuous mode [ 61.460754][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.562140][ T6151] bond0: (slave dummy0): Releasing backup interface [ 61.571236][ T6151] bond0: (slave bond_slave_0): Releasing backup interface [ 61.583260][ T6151] bond0: (slave bond_slave_1): Releasing backup interface [ 61.592824][ T6151] team0: Port device team_slave_0 removed [ 61.600462][ T6151] team0: Port device team_slave_1 removed [ 61.606510][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.615165][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.624402][ T6151] team0: Port device geneve1 removed [ 61.642939][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.652522][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.663255][ T5862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.680290][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.691245][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.765687][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.777355][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.798868][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.813450][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.867014][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 61.873541][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.881180][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 61.910383][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 61.916919][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.924457][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 61.932227][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 61.938754][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.946158][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 61.957757][ T6170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.970366][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 61.977031][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.984654][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 61.999780][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 62.006394][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.013864][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 62.020388][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 62.027037][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.034763][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 62.044253][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 62.050881][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.058495][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 62.068363][ T6195] vhci_hcd: connection closed [ 62.068479][ T41] vhci_hcd: stop threads [ 62.068528][ T6191] vhci_hcd: connection closed [ 62.073243][ T41] vhci_hcd: release socket [ 62.077790][ T6188] vhci_hcd: connection closed [ 62.082224][ T41] vhci_hcd: disconnect device [ 62.096901][ T6183] vhci_hcd: connection closed [ 62.097010][ T6177] vhci_hcd: connection closed [ 62.098683][ T6171] vhci_hcd: connection closed [ 62.102313][ T41] vhci_hcd: stop threads [ 62.107730][ T6179] vhci_hcd: connection closed [ 62.111179][ T41] vhci_hcd: release socket [ 62.111193][ T41] vhci_hcd: disconnect device [ 62.128863][ T1036] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 62.129424][ T41] vhci_hcd: stop threads [ 62.140677][ T41] vhci_hcd: release socket [ 62.141984][ T6172] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 62.145085][ T41] vhci_hcd: disconnect device [ 62.145279][ T41] vhci_hcd: stop threads [ 62.159934][ T41] vhci_hcd: release socket [ 62.164326][ T41] vhci_hcd: disconnect device [ 62.169398][ T41] vhci_hcd: stop threads [ 62.173690][ T41] vhci_hcd: release socket [ 62.178211][ T41] vhci_hcd: disconnect device [ 62.182963][ T41] vhci_hcd: stop threads [ 62.187198][ T41] vhci_hcd: release socket [ 62.191716][ T41] vhci_hcd: disconnect device [ 62.219653][ T41] vhci_hcd: stop threads [ 62.223911][ T41] vhci_hcd: release socket [ 62.228321][ T41] vhci_hcd: disconnect device [ 62.269167][ T6211] loop2: detected capacity change from 0 to 164 [ 62.277093][ T6211] bio_check_eod: 24 callbacks suppressed [ 62.277103][ T6211] syz.2.1126: attempt to access beyond end of device [ 62.277103][ T6211] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.296863][ T6211] syz.2.1126: attempt to access beyond end of device [ 62.296863][ T6211] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.337949][ T6216] lo speed is unknown, defaulting to 1000 [ 62.411138][ T6227] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 62.419012][ T6227] __nla_validate_parse: 7 callbacks suppressed [ 62.419026][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1133'. [ 62.437074][ T6227] team0: Port device geneve1 added [ 62.443053][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.458714][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.480049][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.488599][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.755613][ T6249] lo speed is unknown, defaulting to 1000 [ 62.832632][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 63.526476][ T6286] lo speed is unknown, defaulting to 1000 [ 63.544663][ T6289] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 63.573541][ T6289] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 63.698526][ T6306] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 63.714653][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.743389][ T6306] bond0: (slave veth3): Enslaving as an active interface with a down link [ 63.816129][ T6306] bond0: (slave dummy0): making interface the new active one [ 63.824517][ T6306] dummy0: entered promiscuous mode [ 63.829938][ T6306] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.839308][ T6314] bridge_slave_0: left allmulticast mode [ 63.844971][ T6314] bridge_slave_0: left promiscuous mode [ 63.850924][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.864453][ T6314] bridge_slave_1: left allmulticast mode [ 63.870255][ T6314] bridge_slave_1: left promiscuous mode [ 63.876004][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.897446][ T6314] bond0: (slave bond_slave_0): Releasing backup interface [ 63.921262][ T6314] bond0: (slave bond_slave_1): Releasing backup interface [ 63.929899][ T6314] team0: Port device team_slave_0 removed [ 63.936623][ T6314] team0: Port device team_slave_1 removed [ 63.961420][ T6314] team0: Port device geneve1 removed [ 63.994297][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.003568][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.029316][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.037746][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.150512][ T6333] lo speed is unknown, defaulting to 1000 [ 64.404243][ T6368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'. [ 64.704009][ T6373] loop4: detected capacity change from 0 to 1024 [ 64.749775][ T6373] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.856093][ T6401] $H: (slave bond_slave_0): Releasing backup interface [ 64.864029][ T6401] bond_slave_0: left promiscuous mode [ 64.871538][ T6401] $H: (slave bond_slave_1): Releasing backup interface [ 64.880266][ T6401] bond_slave_1: left promiscuous mode [ 64.900685][ T6401] team0: Port device team_slave_0 removed [ 64.916463][ T6401] team0: Port device team_slave_1 removed [ 64.931380][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.938805][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.951104][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.958591][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.115290][ T6418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.193913][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 65.193955][ T29] audit: type=1326 audit(1758066123.080:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 65.228564][ T29] audit: type=1326 audit(1758066123.110:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 65.252051][ T29] audit: type=1326 audit(1758066123.110:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e36f1eba9 code=0x7ffc0000 [ 65.331340][ T6440] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 65.343949][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.363660][ T6440] bond1: (slave veth3): Enslaving as an active interface with a down link [ 65.405239][ T6440] bond1: (slave dummy0): making interface the new active one [ 65.420809][ T6440] dummy0: entered promiscuous mode [ 65.421561][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6446 comm=syz.3.1223 [ 65.426062][ T6440] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 65.454832][ T6446] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 65.487044][ T6446] bond0: (slave bridge0): making interface the new active one [ 65.506776][ T6446] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.515181][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 65.738648][ T6483] loop4: detected capacity change from 0 to 128 [ 65.751443][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1241'. [ 65.766755][ T29] audit: type=1326 audit(1758066123.650:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.790342][ T29] audit: type=1326 audit(1758066123.650:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.813910][ T29] audit: type=1326 audit(1758066123.650:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.837421][ T29] audit: type=1326 audit(1758066123.650:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.860827][ T29] audit: type=1326 audit(1758066123.650:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.884297][ T29] audit: type=1326 audit(1758066123.650:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 65.907762][ T29] audit: type=1326 audit(1758066123.650:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9f9beba9 code=0x7ffc0000 [ 66.015503][ T6496] bridge0: entered promiscuous mode [ 66.022064][ T6496] bridge0: port 3(macsec1) entered blocking state [ 66.028502][ T6496] bridge0: port 3(macsec1) entered disabled state [ 66.035479][ T6496] macsec1: entered allmulticast mode [ 66.040855][ T6496] bridge0: entered allmulticast mode [ 66.046700][ T6496] macsec1: left allmulticast mode [ 66.051779][ T6496] bridge0: left allmulticast mode [ 66.057268][ T6496] bridge0: left promiscuous mode [ 66.068853][ T6502] loop0: detected capacity change from 0 to 512 [ 66.075614][ T6502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.087017][ T6502] EXT4-fs (loop0): 1 truncate cleaned up [ 66.093265][ T6502] EXT4-fs mount: 2 callbacks suppressed [ 66.093335][ T6502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.195904][ T6502] ================================================================== [ 66.204008][ T6502] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 66.212297][ T6502] [ 66.214616][ T6502] write to 0xffff8881077fe54c of 4 bytes by task 6507 on cpu 0: [ 66.222217][ T6502] xas_set_mark+0x12b/0x140 [ 66.226713][ T6502] __folio_start_writeback+0x1dd/0x440 [ 66.232157][ T6502] ext4_bio_write_folio+0x5ad/0x9f0 [ 66.237335][ T6502] mpage_process_page_bufs+0x4a1/0x620 [ 66.242792][ T6502] mpage_prepare_extent_to_map+0x786/0xc00 [ 66.248699][ T6502] ext4_do_writepages+0xa05/0x2750 [ 66.253798][ T6502] ext4_writepages+0x176/0x300 [ 66.258538][ T6502] do_writepages+0x1c6/0x310 [ 66.263118][ T6502] file_write_and_wait_range+0x156/0x2c0 [ 66.268736][ T6502] generic_buffers_fsync_noflush+0x45/0x120 [ 66.274611][ T6502] ext4_sync_file+0x1ab/0x690 [ 66.279267][ T6502] vfs_fsync_range+0x10d/0x130 [ 66.284009][ T6502] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.289540][ T6502] ext4_file_write_iter+0xdbf/0xf00 [ 66.294725][ T6502] iter_file_splice_write+0x663/0xa60 [ 66.300074][ T6502] direct_splice_actor+0x153/0x2a0 [ 66.305162][ T6502] splice_direct_to_actor+0x30f/0x680 [ 66.310535][ T6502] do_splice_direct+0xda/0x150 [ 66.315295][ T6502] do_sendfile+0x380/0x650 [ 66.319692][ T6502] __x64_sys_sendfile64+0x105/0x150 [ 66.324874][ T6502] x64_sys_call+0x2bb0/0x2ff0 [ 66.329556][ T6502] do_syscall_64+0xd2/0x200 [ 66.334045][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.339916][ T6502] [ 66.342223][ T6502] read to 0xffff8881077fe54c of 4 bytes by task 6502 on cpu 1: [ 66.349738][ T6502] filemap_write_and_wait_range+0xfc/0x340 [ 66.355546][ T6502] filemap_invalidate_pages+0xa4/0x1a0 [ 66.361047][ T6502] kiocb_invalidate_pages+0x6e/0x80 [ 66.366226][ T6502] __iomap_dio_rw+0x5d4/0x1250 [ 66.370983][ T6502] iomap_dio_rw+0x40/0x90 [ 66.375291][ T6502] ext4_file_write_iter+0xad9/0xf00 [ 66.380470][ T6502] iter_file_splice_write+0x663/0xa60 [ 66.385819][ T6502] direct_splice_actor+0x153/0x2a0 [ 66.390922][ T6502] splice_direct_to_actor+0x30f/0x680 [ 66.396275][ T6502] do_splice_direct+0xda/0x150 [ 66.401014][ T6502] do_sendfile+0x380/0x650 [ 66.405412][ T6502] __x64_sys_sendfile64+0x105/0x150 [ 66.410615][ T6502] x64_sys_call+0x2bb0/0x2ff0 [ 66.415288][ T6502] do_syscall_64+0xd2/0x200 [ 66.419778][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.425645][ T6502] [ 66.427966][ T6502] value changed: 0x0a000021 -> 0x00000021 [ 66.433664][ T6502] [ 66.435977][ T6502] Reported by Kernel Concurrency Sanitizer on: [ 66.442116][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.0.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.451819][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.461851][ T6502] ================================================================== [ 66.719866][ T6502] ================================================================== [ 66.727964][ T6502] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 66.735150][ T6502] [ 66.737471][ T6502] write to 0xffff8881077fe54c of 4 bytes by task 6507 on cpu 0: [ 66.745104][ T6502] __xa_set_mark+0x172/0x1a0 [ 66.749701][ T6502] __folio_mark_dirty+0x3af/0x4d0 [ 66.754735][ T6502] mark_buffer_dirty+0x11e/0x210 [ 66.759673][ T6502] block_write_end+0x12d/0x210 [ 66.764451][ T6502] ext4_write_end+0x134/0x730 [ 66.769138][ T6502] generic_perform_write+0x30f/0x490 [ 66.774431][ T6502] ext4_buffered_write_iter+0x1ee/0x3c0 [ 66.780001][ T6502] ext4_file_write_iter+0xdbf/0xf00 [ 66.785211][ T6502] iter_file_splice_write+0x663/0xa60 [ 66.790582][ T6502] direct_splice_actor+0x153/0x2a0 [ 66.795734][ T6502] splice_direct_to_actor+0x30f/0x680 [ 66.801204][ T6502] do_splice_direct+0xda/0x150 [ 66.805971][ T6502] do_sendfile+0x380/0x650 [ 66.810393][ T6502] __x64_sys_sendfile64+0x105/0x150 [ 66.815728][ T6502] x64_sys_call+0x2bb0/0x2ff0 [ 66.820412][ T6502] do_syscall_64+0xd2/0x200 [ 66.824928][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.830816][ T6502] [ 66.833132][ T6502] read to 0xffff8881077fe54c of 4 bytes by task 6502 on cpu 1: [ 66.840673][ T6502] xas_find_marked+0x5dc/0x620 [ 66.845448][ T6502] find_get_entry+0x5d/0x380 [ 66.850037][ T6502] filemap_get_folios_tag+0x92/0x210 [ 66.855324][ T6502] filemap_write_and_wait_range+0x1d3/0x340 [ 66.861231][ T6502] ext4_file_write_iter+0xe04/0xf00 [ 66.866442][ T6502] iter_file_splice_write+0x663/0xa60 [ 66.871811][ T6502] direct_splice_actor+0x153/0x2a0 [ 66.876919][ T6502] splice_direct_to_actor+0x30f/0x680 [ 66.882288][ T6502] do_splice_direct+0xda/0x150 [ 66.887053][ T6502] do_sendfile+0x380/0x650 [ 66.891473][ T6502] __x64_sys_sendfile64+0x105/0x150 [ 66.896679][ T6502] x64_sys_call+0x2bb0/0x2ff0 [ 66.901364][ T6502] do_syscall_64+0xd2/0x200 [ 66.905881][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.911777][ T6502] [ 66.914094][ T6502] value changed: 0x00000021 -> 0x0a000021 [ 66.919798][ T6502] [ 66.922115][ T6502] Reported by Kernel Concurrency Sanitizer on: [ 66.928252][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.0.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.937968][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.948017][ T6502] ================================================================== [ 67.111290][ T6507] ================================================================== [ 67.119407][ T6507] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 67.126587][ T6507] [ 67.128915][ T6507] write to 0xffff8881077fe54c of 4 bytes by task 6502 on cpu 1: [ 67.136547][ T6507] xas_set_mark+0x12b/0x140 [ 67.141069][ T6507] __folio_start_writeback+0x1dd/0x440 [ 67.146561][ T6507] ext4_bio_write_folio+0x5ad/0x9f0 [ 67.151758][ T6507] mpage_process_page_bufs+0x4a1/0x620 [ 67.157219][ T6507] mpage_prepare_extent_to_map+0x786/0xc00 [ 67.163023][ T6507] ext4_do_writepages+0xa05/0x2750 [ 67.168141][ T6507] ext4_writepages+0x176/0x300 [ 67.172908][ T6507] do_writepages+0x1c6/0x310 [ 67.177500][ T6507] filemap_write_and_wait_range+0x144/0x340 [ 67.183404][ T6507] ext4_file_write_iter+0xe04/0xf00 [ 67.188635][ T6507] iter_file_splice_write+0x663/0xa60 [ 67.194024][ T6507] direct_splice_actor+0x153/0x2a0 [ 67.199137][ T6507] splice_direct_to_actor+0x30f/0x680 [ 67.204509][ T6507] do_splice_direct+0xda/0x150 [ 67.209265][ T6507] do_sendfile+0x380/0x650 [ 67.213684][ T6507] __x64_sys_sendfile64+0x105/0x150 [ 67.218886][ T6507] x64_sys_call+0x2bb0/0x2ff0 [ 67.223577][ T6507] do_syscall_64+0xd2/0x200 [ 67.228099][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.233996][ T6507] [ 67.236310][ T6507] read to 0xffff8881077fe54c of 4 bytes by task 6507 on cpu 0: [ 67.243842][ T6507] xas_find_marked+0x5dc/0x620 [ 67.248614][ T6507] find_get_entry+0x5d/0x380 [ 67.253203][ T6507] filemap_get_folios_tag+0x92/0x210 [ 67.258490][ T6507] mpage_prepare_extent_to_map+0x320/0xc00 [ 67.264294][ T6507] ext4_do_writepages+0xa05/0x2750 [ 67.269417][ T6507] ext4_writepages+0x176/0x300 [ 67.274178][ T6507] do_writepages+0x1c6/0x310 [ 67.278776][ T6507] file_write_and_wait_range+0x156/0x2c0 [ 67.284426][ T6507] generic_buffers_fsync_noflush+0x45/0x120 [ 67.290410][ T6507] ext4_sync_file+0x1ab/0x690 [ 67.295081][ T6507] vfs_fsync_range+0x10d/0x130 [ 67.299845][ T6507] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.305401][ T6507] ext4_file_write_iter+0xdbf/0xf00 [ 67.310603][ T6507] iter_file_splice_write+0x663/0xa60 [ 67.315971][ T6507] direct_splice_actor+0x153/0x2a0 [ 67.321075][ T6507] splice_direct_to_actor+0x30f/0x680 [ 67.326448][ T6507] do_splice_direct+0xda/0x150 [ 67.331203][ T6507] do_sendfile+0x380/0x650 [ 67.335627][ T6507] __x64_sys_sendfile64+0x105/0x150 [ 67.340825][ T6507] x64_sys_call+0x2bb0/0x2ff0 [ 67.345497][ T6507] do_syscall_64+0xd2/0x200 [ 67.350012][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.355903][ T6507] [ 67.358210][ T6507] value changed: 0x0a000021 -> 0x04000021 [ 67.363912][ T6507] [ 67.366223][ T6507] Reported by Kernel Concurrency Sanitizer on: [ 67.372362][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.0.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.382076][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.392125][ T6507] ================================================================== [ 67.400334][ T1036] usb 1-1: enqueue for inactive port 0 [ 67.405799][ T1036] usb 1-1: enqueue for inactive port 0 [ 67.420956][ T6507] syz.0.1249 (6507) used greatest stack depth: 9080 bytes left [ 67.429179][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.478930][ T1036] vhci_hcd: vhci_device speed not set [ 75.008860][ T2648] dummy0: left promiscuous mode