last executing test programs: 51.892064628s ago: executing program 4 (id=260): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 51.868480269s ago: executing program 4 (id=262): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 51.826577649s ago: executing program 4 (id=263): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x48002) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 51.752084391s ago: executing program 4 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1e58d7, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 51.706044551s ago: executing program 4 (id=269): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 51.540375264s ago: executing program 4 (id=272): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x100000006) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 51.509268315s ago: executing program 32 (id=272): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x100000006) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1.613332794s ago: executing program 5 (id=1427): io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[0x0]) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x5fb, 0x5, 0x6, 0x800, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 1.182996051s ago: executing program 5 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 732.403308ms ago: executing program 0 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 676.240099ms ago: executing program 0 (id=1447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 659.966289ms ago: executing program 1 (id=1448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 630.688209ms ago: executing program 1 (id=1450): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 620.31304ms ago: executing program 0 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_destroy(r3) 511.477611ms ago: executing program 0 (id=1453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 431.942563ms ago: executing program 3 (id=1457): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xffffffffffffff84, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 399.547153ms ago: executing program 3 (id=1458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 385.144053ms ago: executing program 2 (id=1459): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) keyctl$search(0xa, r0, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, r0) 364.715813ms ago: executing program 3 (id=1460): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$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") pipe2$watch_queue(&(0x7f0000000000), 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff001, 0x7, 0x8, 0x8, 0x3856}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 343.668304ms ago: executing program 2 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 335.891474ms ago: executing program 0 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xf6c447fee59241f0}) close(r4) 314.784484ms ago: executing program 5 (id=1463): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) clock_adjtime(0x1, 0x0) 260.089855ms ago: executing program 2 (id=1464): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x7, 0x7) 239.416816ms ago: executing program 1 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) fgetxattr(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 239.065756ms ago: executing program 5 (id=1466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/202, 0xca}], 0x1}, 0x0) 221.733886ms ago: executing program 0 (id=1467): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x28df, &(0x7f00000006c0)={0x0, 0x3, 0x1, 0x0, 0xad}, &(0x7f0000000640), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 206.488086ms ago: executing program 1 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 201.136286ms ago: executing program 5 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) close(r0) 192.878526ms ago: executing program 2 (id=1470): r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setreuid(0xee01, 0xee01) fcntl$setlease(r0, 0x400, 0x0) 157.846037ms ago: executing program 2 (id=1471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 157.354427ms ago: executing program 3 (id=1472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 135.400738ms ago: executing program 1 (id=1473): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 119.201588ms ago: executing program 2 (id=1474): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x1, 0xc026, 0x0, 0x21b1, 0xff, "f6629d1c7990c280355a24f314b5d5e09d3393", 0x9, 0x7ff}) 98.791408ms ago: executing program 1 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 69.566739ms ago: executing program 5 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r2, 0x12) 17.14988ms ago: executing program 3 (id=1477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xace, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {0x3}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 0s ago: executing program 3 (id=1478): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): ed { open } for pid=4239 comm="syz.1.287" path="/62/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.764853][ T29] audit: type=1400 audit(1753653463.441:805): avc: denied { ioctl } for pid=4239 comm="syz.1.287" path="/62/file0" dev="tmpfs" ino=342 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.802784][ T4238] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.812262][ T37] veth1_macvtap: left promiscuous mode [ 49.837787][ T37] veth0_macvtap: left promiscuous mode [ 49.848573][ T4238] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.863512][ T37] veth1_vlan: left promiscuous mode [ 49.877831][ T4238] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.286: corrupted inode contents [ 49.893326][ T37] veth0_vlan: left promiscuous mode [ 49.896202][ T29] audit: type=1326 audit(1753653463.611:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 49.922032][ T29] audit: type=1326 audit(1753653463.611:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 49.922624][ T4238] EXT4-fs (loop0): Remounting filesystem read-only [ 49.945452][ T29] audit: type=1326 audit(1753653463.611:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 49.975322][ T29] audit: type=1326 audit(1753653463.611:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 49.975598][ T4238] EXT4-fs (loop0): 1 truncate cleaned up [ 50.000314][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.015251][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.026011][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.036929][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.131200][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.158774][ T37] team0 (unregistering): Port device team_slave_1 removed [ 50.172653][ T37] team0 (unregistering): Port device team_slave_0 removed [ 50.220218][ T4256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.237256][ T4264] veth0_to_team: entered promiscuous mode [ 50.243069][ T4264] veth0_to_team: entered allmulticast mode [ 50.263357][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.270602][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.279747][ T4178] bridge_slave_0: entered allmulticast mode [ 50.290049][ T4178] bridge_slave_0: entered promiscuous mode [ 50.321838][ T4269] openvswitch: netlink: Message has 6 unknown bytes. [ 50.330102][ T4256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.383778][ T4275] loop0: detected capacity change from 0 to 2048 [ 50.391919][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.399161][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.407874][ T4178] bridge_slave_1: entered allmulticast mode [ 50.414481][ T4178] bridge_slave_1: entered promiscuous mode [ 50.433760][ T4273] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.445021][ T4275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.462334][ T4275] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.483318][ T4256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.508173][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.529217][ T4256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.541980][ T4275] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.298: reserved inode found cleared - inode=1 [ 50.577857][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.614674][ T4178] team0: Port device team_slave_0 added [ 50.614716][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.626278][ T4178] team0: Port device team_slave_1 added [ 50.663181][ T4256] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.688274][ T4256] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.721335][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.728416][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.754478][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.775340][ T4256] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.804418][ T4256] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.813391][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.820561][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.846616][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.890683][ T4178] hsr_slave_0: entered promiscuous mode [ 50.916363][ T4178] hsr_slave_1: entered promiscuous mode [ 50.922659][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.931050][ T4178] Cannot create hsr debugfs directory [ 50.949846][ T4314] netlink: 664 bytes leftover after parsing attributes in process `syz.1.306'. [ 50.972813][ T4312] wg2: entered promiscuous mode [ 50.978074][ T4312] wg2: entered allmulticast mode [ 51.043703][ T4320] syz.2.309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.153256][ T4332] tipc: Started in network mode [ 51.158282][ T4332] tipc: Node identity ac14140f, cluster identity 4711 [ 51.216203][ T4332] tipc: New replicast peer: 255.255.255.255 [ 51.222523][ T4332] tipc: Enabled bearer , priority 10 [ 51.237421][ T4178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.248746][ T4178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.267660][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 51.276637][ T4342] tipc: Disabling bearer [ 51.288230][ T4178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.301884][ T4178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.392876][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.432200][ T4358] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.452357][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.492094][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.499321][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.550221][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.557490][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.591997][ T4378] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.676406][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 51.736600][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.803291][ T4409] loop2: detected capacity change from 0 to 512 [ 51.871139][ T4409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.910254][ T4409] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.060695][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.093906][ T4178] veth0_vlan: entered promiscuous mode [ 52.116081][ T4178] veth1_vlan: entered promiscuous mode [ 52.152848][ T4178] veth0_macvtap: entered promiscuous mode [ 52.180200][ T4178] veth1_macvtap: entered promiscuous mode [ 52.220401][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.259060][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.284129][ T4178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.293141][ T4178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.302125][ T4178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.310990][ T4178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.533399][ T4501] loop2: detected capacity change from 0 to 1024 [ 52.581155][ T4501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.599687][ T4501] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.724630][ T4518] wg2: entered promiscuous mode [ 52.729686][ T4518] wg2: entered allmulticast mode [ 52.802109][ T59] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 52.817246][ T4528] bond0: entered promiscuous mode [ 52.822413][ T4528] bond_slave_0: entered promiscuous mode [ 52.823963][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 52.828209][ T4528] bond_slave_1: entered promiscuous mode [ 52.840892][ T59] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.840892][ T59] [ 52.864715][ T4528] batadv0: entered promiscuous mode [ 52.870838][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.882924][ T4528] hsr1: entered allmulticast mode [ 52.888077][ T4528] bond0: entered allmulticast mode [ 52.893321][ T4528] bond_slave_0: entered allmulticast mode [ 52.899136][ T4528] bond_slave_1: entered allmulticast mode [ 52.905058][ T4528] batadv0: entered allmulticast mode [ 52.923223][ T4532] loop3: detected capacity change from 0 to 512 [ 52.932598][ T4532] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.941461][ T4532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.951756][ T4528] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 52.954255][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 52.973303][ T4532] System zones: 1-12 [ 52.978366][ T4532] EXT4-fs (loop3): 1 truncate cleaned up [ 52.984193][ T4528] bond0: left promiscuous mode [ 52.984659][ T4532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.989111][ T4528] bond_slave_0: left promiscuous mode [ 53.007076][ T4528] bond_slave_1: left promiscuous mode [ 53.013968][ T4528] batadv0: left promiscuous mode [ 53.093547][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.137265][ T4543] loop2: detected capacity change from 0 to 128 [ 53.183691][ T4543] FAT-fs (loop2): IO charset cp737 not found [ 53.272625][ T4555] loop1: detected capacity change from 0 to 1024 [ 53.288906][ T4555] EXT4-fs: Ignoring removed orlov option [ 53.332730][ T4555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.493226][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.657811][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 53.738685][ T4584] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 53.781506][ T4584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.789037][ T4591] loop5: detected capacity change from 0 to 1024 [ 53.800981][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 53.818422][ T4591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.831060][ T4591] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.839848][ T4594] bond1: (slave veth3): Enslaving as an active interface with a down link [ 53.941645][ T4584] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.949003][ T4584] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 53.988004][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 393: padding at end of block bitmap is not set [ 54.007862][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 54.020634][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.020634][ T12] [ 54.037973][ T4605] netlink: 96 bytes leftover after parsing attributes in process `syz.3.388'. [ 54.049421][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.118050][ T4609] loop5: detected capacity change from 0 to 512 [ 54.151901][ T4609] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.167551][ T4609] EXT4-fs (loop5): mount failed [ 54.228666][ T4616] batman_adv: batadv0: Adding interface: dummy0 [ 54.235065][ T4616] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.262340][ T4616] batman_adv: batadv0: Interface activated: dummy0 [ 54.279949][ T4622] loop2: detected capacity change from 0 to 1024 [ 54.283093][ T4616] batadv0: mtu less than device minimum [ 54.288331][ T4622] EXT4-fs: Ignoring removed orlov option [ 54.292406][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.308788][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.319799][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.321680][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.330648][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.353162][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.364023][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.374878][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.385711][ T4616] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.437592][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 54.472939][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.480295][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.499123][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.536052][ T4635] loop3: detected capacity change from 0 to 1024 [ 54.560702][ T4635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.570282][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.582166][ T4635] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.583358][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.624977][ T4620] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.634088][ T4620] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.643096][ T4620] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.652155][ T4620] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.727672][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 54.727689][ T29] audit: type=1400 audit(1753653468.451:945): avc: denied { read } for pid=4645 comm="syz.2.400" path="socket:[7634]" dev="sockfs" ino=7634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.762695][ T4644] loop0: detected capacity change from 0 to 128 [ 54.764574][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 54.809681][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 54.822510][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.822510][ T31] [ 54.835443][ T4644] FAT-fs (loop0): IO charset cp737 not found [ 54.850224][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.875080][ T4653] loop5: detected capacity change from 0 to 512 [ 54.891525][ T4653] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 54.904629][ T4655] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 54.924119][ T4653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 54.941411][ T4653] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.404: corrupted in-inode xattr: e_value size too large [ 54.965709][ T4653] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.404: couldn't read orphan inode 15 (err -117) [ 54.984823][ T4653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.004738][ T4655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.029388][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.059095][ T4661] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.084589][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.093955][ T4655] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 55.187605][ T29] audit: type=1400 audit(1753653468.911:946): avc: denied { setopt } for pid=4674 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.214067][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 55.249331][ T4680] veth0_to_team: entered promiscuous mode [ 55.255287][ T4680] veth0_to_team: entered allmulticast mode [ 55.277202][ T4682] Zero length message leads to an empty skb [ 55.309486][ T4686] loop3: detected capacity change from 0 to 128 [ 55.342463][ T4686] FAT-fs (loop3): IO charset cp737 not found [ 55.360797][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.368048][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.427040][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.437752][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.453408][ T29] audit: type=1326 audit(1753653469.171:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa93a10e9a9 code=0x0 [ 55.484705][ T4688] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.493715][ T4688] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.502862][ T4688] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.511971][ T4688] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.639411][ T4705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 55.761022][ T4708] loop0: detected capacity change from 0 to 1024 [ 55.768016][ T4708] EXT4-fs: Ignoring removed bh option [ 55.773860][ T4708] EXT4-fs: inline encryption not supported [ 55.781280][ T29] audit: type=1400 audit(1753653469.501:948): avc: denied { execute } for pid=4707 comm="syz.1.423" path="/106/cpu.stat" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.781454][ T4708] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.817657][ T4708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 55.834178][ T4708] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.422: lblock 2 mapped to illegal pblock 2 (length 1) [ 55.856093][ T4708] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 55.864274][ T4708] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.422: lblock 0 mapped to illegal pblock 48 (length 1) [ 55.878768][ T4708] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 55.887729][ T4708] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.422: Failed to acquire dquot type 0 [ 55.899317][ T4708] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 55.910048][ T4708] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.422: mark_inode_dirty error [ 55.930725][ T4708] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 55.956745][ T4708] EXT4-fs (loop0): 1 orphan inode deleted [ 55.963058][ T4708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.968847][ T4718] loop1: detected capacity change from 0 to 512 [ 55.982367][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.426'. [ 55.991945][ T59] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.010670][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 56.035660][ T4718] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 56.048032][ T59] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 56.056556][ T59] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 56.073479][ T4718] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.076484][ T29] audit: type=1400 audit(1753653469.791:949): avc: denied { remount } for pid=4706 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.090309][ T4708] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.107702][ T29] audit: type=1400 audit(1753653469.791:950): avc: denied { write } for pid=4721 comm="syz.5.429" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.140371][ T4718] EXT4-fs (loop1): mount failed [ 56.223676][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.263986][ T4738] loop3: detected capacity change from 0 to 1024 [ 56.287887][ T4738] EXT4-fs: Ignoring removed orlov option [ 56.317770][ T4738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.353801][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.361216][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.449887][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.462616][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.474671][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.510847][ T4741] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.520058][ T4741] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.529043][ T4741] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.538040][ T4741] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.669940][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 56.681374][ T4751] loop2: detected capacity change from 0 to 2048 [ 56.718758][ T4751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.792314][ T4759] loop9: detected capacity change from 0 to 7 [ 56.845373][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 56.911867][ T4770] loop0: detected capacity change from 0 to 512 [ 56.927624][ T4772] loop3: detected capacity change from 0 to 1024 [ 56.943818][ T4772] EXT4-fs: Ignoring removed bh option [ 56.967955][ T4772] EXT4-fs: inline encryption not supported [ 56.974910][ T4770] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.974939][ T4772] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.006451][ T4770] EXT4-fs (loop0): mount failed [ 57.016879][ T4772] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 57.051997][ T4772] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.444: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.074487][ T4772] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.444: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.107124][ T4772] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.444: Failed to acquire dquot type 0 [ 57.125111][ T4777] loop0: detected capacity change from 0 to 128 [ 57.143345][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.176756][ T4772] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 57.177977][ T4777] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.189400][ T4772] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.444: mark_inode_dirty error [ 57.200582][ T4777] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.238920][ T4772] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 57.271749][ T4781] loop2: detected capacity change from 0 to 1024 [ 57.286276][ T4772] EXT4-fs (loop3): 1 orphan inode deleted [ 57.305515][ T59] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.345066][ T4781] EXT4-fs: Ignoring removed orlov option [ 57.356758][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 57.376845][ T4772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.408687][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.420777][ T4781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.458875][ T4772] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.505300][ T4789] : renamed from vlan1 [ 57.514522][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.527461][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.621719][ T4802] loop0: detected capacity change from 0 to 128 [ 57.671016][ T4806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.458'. [ 57.699148][ T4802] bio_check_eod: 41 callbacks suppressed [ 57.699165][ T4802] syz.0.456: attempt to access beyond end of device [ 57.699165][ T4802] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 57.759955][ T4806] syz.2.458 (4806) used greatest stack depth: 9776 bytes left [ 57.818778][ T4813] loop0: detected capacity change from 0 to 128 [ 57.973191][ T4820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.472'. [ 58.242937][ T4828] loop5: detected capacity change from 0 to 1024 [ 58.260001][ T4828] EXT4-fs: Ignoring removed orlov option [ 58.278268][ T4828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.392226][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.426015][ T4839] loop1: detected capacity change from 0 to 1024 [ 58.472730][ T4839] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.483909][ T4839] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.500140][ T4839] JBD2: no valid journal superblock found [ 58.506150][ T4839] EXT4-fs (loop1): Could not load journal inode [ 58.530334][ T4839] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 58.553228][ T4846] loop5: detected capacity change from 0 to 2048 [ 58.569788][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.569788][ T12] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 58.593398][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.593398][ T12] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 58.613662][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.613662][ T12] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 58.615485][ T4846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.647398][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.647398][ T12] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 58.660848][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.660848][ T12] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 58.674438][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.674438][ T12] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 58.687966][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.687966][ T12] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 58.701565][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.701565][ T12] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 58.715206][ T12] kworker/u8:0: attempt to access beyond end of device [ 58.715206][ T12] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 58.732453][ T4852] loop3: detected capacity change from 0 to 128 [ 58.753886][ T4854] tipc: Failed to remove unknown binding: 66,1,1/0:685828776/685828778 [ 58.875403][ T4861] Cannot find del_set index 0 as target [ 59.068803][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.146732][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.478'. [ 59.165596][ T4874] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 59.513278][ T4899] team0: Caught tx_queue_len zero misconfig [ 59.645202][ T4908] loop5: detected capacity change from 0 to 1024 [ 59.659880][ T4908] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.670945][ T4908] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.700795][ T4908] JBD2: no valid journal superblock found [ 59.706731][ T4908] EXT4-fs (loop5): Could not load journal inode [ 59.733367][ T4908] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 59.784787][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 59.941507][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 59.941524][ T29] audit: type=1326 audit(1753653473.661:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 59.977036][ T29] audit: type=1326 audit(1753653473.661:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 59.977239][ T4921] loop3: detected capacity change from 0 to 512 [ 60.000625][ T29] audit: type=1326 audit(1753653473.661:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030213][ T29] audit: type=1326 audit(1753653473.661:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030284][ T29] audit: type=1326 audit(1753653473.661:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030390][ T29] audit: type=1326 audit(1753653473.661:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030429][ T29] audit: type=1326 audit(1753653473.661:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030492][ T29] audit: type=1326 audit(1753653473.661:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030530][ T29] audit: type=1326 audit(1753653473.701:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.030558][ T29] audit: type=1326 audit(1753653473.701:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4920 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 60.173574][ T4921] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.504: iget: bad i_size value: 38620345925642 [ 60.175367][ T4921] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.504: couldn't read orphan inode 15 (err -117) [ 60.175966][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.224871][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.368931][ T4932] gtp0: entered promiscuous mode [ 60.388728][ T4935] loop0: detected capacity change from 0 to 1024 [ 60.405178][ T4935] EXT4-fs: Ignoring removed orlov option [ 60.422728][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.561814][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.590568][ T4959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.688070][ T4959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.742374][ T4966] netlink: 9 bytes leftover after parsing attributes in process `syz.1.511'. [ 60.751723][ T4966] gretap0: entered promiscuous mode [ 60.758375][ T4966] netlink: 5 bytes leftover after parsing attributes in process `syz.1.511'. [ 60.769831][ T4959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.784015][ T4966] 0{X: renamed from gretap0 [ 60.790842][ T4966] 0{X: left promiscuous mode [ 60.796036][ T4966] 0{X: entered allmulticast mode [ 60.802274][ T4966] net_ratelimit: 11 callbacks suppressed [ 60.802286][ T4966] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 60.828907][ T4959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.933247][ T4980] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.957591][ T4959] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.974156][ T4959] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.988836][ T4980] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.003234][ T4959] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.023671][ T4959] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.067490][ T4980] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.105515][ T4991] loop1: detected capacity change from 0 to 1024 [ 61.117330][ T4980] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.131152][ T4991] EXT4-fs: Ignoring removed orlov option [ 61.183635][ T4980] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.219439][ T4980] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.235065][ T4980] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.248713][ T4980] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299179][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 61.399793][ T5014] loop3: detected capacity change from 0 to 2048 [ 61.439357][ T5016] bridge0: port 3(macsec1) entered blocking state [ 61.445937][ T5016] bridge0: port 3(macsec1) entered disabled state [ 61.452726][ T5016] macsec1: entered allmulticast mode [ 61.458093][ T5016] bridge0: entered allmulticast mode [ 61.465626][ T5016] macsec1: left allmulticast mode [ 61.470712][ T5016] bridge0: left allmulticast mode [ 61.864299][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 61.885738][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 61.904666][ T5036] loop1: detected capacity change from 0 to 1024 [ 61.921030][ T5036] EXT4-fs: Ignoring removed orlov option [ 62.064614][ T5047] netlink: 9 bytes leftover after parsing attributes in process `syz.0.537'. [ 62.074094][ T5047] gretap0: entered promiscuous mode [ 62.136634][ T5047] netlink: 5 bytes leftover after parsing attributes in process `syz.0.537'. [ 62.157228][ T5047] 0{X: renamed from gretap0 [ 62.176086][ T5047] 0{X: left promiscuous mode [ 62.181207][ T5047] 0{X: entered allmulticast mode [ 62.210628][ T5047] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 62.532901][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 62.540727][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 62.554666][ T5094] loop2: detected capacity change from 0 to 164 [ 62.554798][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.568954][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.576708][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.578909][ T5094] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.584411][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.600345][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.608095][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.615822][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.623514][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.631283][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.631324][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.631350][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.654375][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.662177][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.669947][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 62.672217][ T36] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 62.697010][ T5098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 62.703622][ T5098] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 62.711473][ T5098] vhci_hcd vhci_hcd.0: Device attached [ 62.731702][ T5101] vhci_hcd: connection closed [ 62.731898][ T51] vhci_hcd: stop threads [ 62.740969][ T51] vhci_hcd: release socket [ 62.745628][ T51] vhci_hcd: disconnect device [ 62.778328][ T5100] fido_id[5100]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.827935][ T5107] loop5: detected capacity change from 0 to 1024 [ 62.846580][ T5107] EXT4-fs: Ignoring removed orlov option [ 63.257470][ T5142] loop2: detected capacity change from 0 to 1024 [ 63.265578][ T5142] EXT4-fs: Ignoring removed orlov option [ 63.381310][ T2996] udevd[2996]: worker [3299] terminated by signal 33 (Unknown signal 33) [ 63.400085][ T2996] udevd[2996]: worker [3299] failed while handling '/devices/virtual/block/loop2' [ 63.772710][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 63.818075][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 64.347495][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 64.355341][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 64.378782][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.386845][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.394594][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.402459][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.410267][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.410667][ T5218] netlink: 9 bytes leftover after parsing attributes in process `syz.3.568'. [ 64.417965][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.434458][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.442216][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.449928][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.457669][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.465573][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.473271][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.481017][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.482483][ T5228] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 64.488720][ T1036] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 64.495240][ T5228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.495449][ T5228] vhci_hcd vhci_hcd.0: Device attached [ 64.532291][ T5218] gretap0: entered promiscuous mode [ 64.555492][ T5237] 0{X: renamed from gretap0 [ 64.563962][ T1036] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 64.581276][ T5237] 0{X: left promiscuous mode [ 64.586461][ T5237] 0{X: entered allmulticast mode [ 64.617077][ T5237] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.642412][ T5229] vhci_hcd: connection closed [ 64.642658][ T314] vhci_hcd: stop threads [ 64.651787][ T314] vhci_hcd: release socket [ 64.656272][ T314] vhci_hcd: disconnect device [ 64.661541][ T5243] fido_id[5243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.114003][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 65.114019][ T29] audit: type=1326 audit(1753653478.831:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.215060][ T5220] Set syz1 is full, maxelem 65536 reached [ 65.285802][ T5277] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 65.404165][ T5289] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.429844][ T29] audit: type=1326 audit(1753653479.151:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.453302][ T29] audit: type=1326 audit(1753653479.151:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.487949][ T29] audit: type=1326 audit(1753653479.171:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.511458][ T29] audit: type=1326 audit(1753653479.171:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.534976][ T29] audit: type=1326 audit(1753653479.171:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.558460][ T29] audit: type=1326 audit(1753653479.181:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.581884][ T29] audit: type=1326 audit(1753653479.181:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.605332][ T29] audit: type=1326 audit(1753653479.181:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.628812][ T29] audit: type=1326 audit(1753653479.181:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f974ab0e9a9 code=0x7ffc0000 [ 65.745949][ T5309] __nla_validate_parse: 2 callbacks suppressed [ 65.745971][ T5309] netlink: 9 bytes leftover after parsing attributes in process `syz.5.585'. [ 65.795591][ T5324] netlink: 5 bytes leftover after parsing attributes in process `syz.5.585'. [ 65.842102][ T5324] 0{X: renamed from gretap0 [ 65.842861][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 65.854807][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 65.864606][ T5324] 0{X: entered allmulticast mode [ 65.865637][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.877767][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.879656][ T5324] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 65.885440][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.885469][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.916929][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.924705][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.932473][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.940198][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.942378][ T5330] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 65.947891][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.954513][ T5330] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.962096][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.969888][ T5330] vhci_hcd vhci_hcd.0: Device attached [ 65.977496][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.990757][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 65.998542][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 66.006247][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 66.014153][ T5309] 0{X: entered promiscuous mode [ 66.019535][ T5309] 0{X: left allmulticast mode [ 66.028569][ T36] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 66.072959][ T5331] vhci_hcd: connection closed [ 66.073274][ T37] vhci_hcd: stop threads [ 66.082654][ T37] vhci_hcd: release socket [ 66.087283][ T37] vhci_hcd: disconnect device [ 66.196284][ T5342] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 66.651345][ T5339] Set syz1 is full, maxelem 65536 reached [ 66.680385][ T5354] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 66.707347][ T5358] loop0: detected capacity change from 0 to 512 [ 66.726645][ T5358] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.921689][ T5383] loop1: detected capacity change from 0 to 512 [ 66.944168][ T5387] netlink: 9 bytes leftover after parsing attributes in process `syz.2.601'. [ 66.960279][ T5383] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.981383][ T5387] gretap0: entered promiscuous mode [ 67.004399][ T5387] netlink: 5 bytes leftover after parsing attributes in process `syz.2.601'. [ 67.036281][ T5387] 0{X: renamed from gretap0 [ 67.046590][ T5387] 0{X: left promiscuous mode [ 67.051760][ T5387] 0{X: entered allmulticast mode [ 67.077516][ T5387] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 67.147622][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 67.155424][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 67.173263][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.181056][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.188807][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.196509][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.204341][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.212063][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.219880][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.227640][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.235464][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.243168][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.250899][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.258649][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.266547][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.274232][ T5019] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.297663][ T5412] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 67.304344][ T5412] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.312155][ T5412] vhci_hcd vhci_hcd.0: Device attached [ 67.323911][ T5019] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.377262][ T5419] fido_id[5419]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.408924][ T5414] vhci_hcd: connection closed [ 67.409314][ T314] vhci_hcd: stop threads [ 67.418507][ T314] vhci_hcd: release socket [ 67.423002][ T314] vhci_hcd: disconnect device [ 67.447383][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 67.600557][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.607855][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.617621][ T5409] bridge_slave_0: entered allmulticast mode [ 67.624171][ T5409] bridge_slave_0: entered promiscuous mode [ 67.633610][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.640990][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.651983][ T5409] bridge_slave_1: entered allmulticast mode [ 67.659101][ T5409] bridge_slave_1: entered promiscuous mode [ 67.803625][ T5432] netlink: 9 bytes leftover after parsing attributes in process `syz.0.622'. [ 67.854446][ T5434] netlink: 5 bytes leftover after parsing attributes in process `syz.0.622'. [ 67.903334][ T5410] Set syz1 is full, maxelem 65536 reached [ 67.926342][ T59] bridge_slave_1: left allmulticast mode [ 67.932123][ T59] bridge_slave_1: left promiscuous mode [ 67.938005][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.964909][ T59] bridge_slave_0: left allmulticast mode [ 67.970763][ T59] bridge_slave_0: left promiscuous mode [ 67.976537][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.105425][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.124768][ T59] bond_slave_0: left allmulticast mode [ 68.136871][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.157491][ T59] bond_slave_1: left allmulticast mode [ 68.163436][ T59] bond0 (unregistering): Released all slaves [ 68.189129][ T5432] 0{X: entered promiscuous mode [ 68.194494][ T5432] 0{X: left allmulticast mode [ 68.206074][ T5434] 1{X: renamed from 30{X [ 68.217125][ T5434] 1{X: left promiscuous mode [ 68.222228][ T5434] 1{X: entered allmulticast mode [ 68.229342][ T5434] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 68.247566][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.261468][ T59] hsr_slave_0: left promiscuous mode [ 68.268405][ T59] hsr_slave_1: left promiscuous mode [ 68.274164][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.281844][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.357755][ T59] team0 (unregistering): Port device team_slave_1 removed [ 68.387708][ T59] team0 (unregistering): Port device team_slave_0 removed [ 68.473247][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.536624][ T5409] team0: Port device team_slave_0 added [ 68.553095][ T5409] team0: Port device team_slave_1 added [ 68.585813][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.592830][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.618915][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.631930][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.638953][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.665049][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.701651][ T5409] hsr_slave_0: entered promiscuous mode [ 68.708419][ T5409] hsr_slave_1: entered promiscuous mode [ 68.714859][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.722596][ T5409] Cannot create hsr debugfs directory [ 68.898047][ T59] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.966969][ T59] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.047600][ T59] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.097982][ T5409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.108973][ T5409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.119863][ T59] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.169204][ T5539] loop3: detected capacity change from 0 to 512 [ 69.170753][ T5409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.206540][ T5539] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.218230][ T5409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.323790][ T5560] loop0: detected capacity change from 0 to 512 [ 69.343537][ T5560] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.369690][ T59] bridge_slave_1: left allmulticast mode [ 69.375466][ T59] bridge_slave_1: left promiscuous mode [ 69.381303][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.427856][ T59] bridge_slave_0: left allmulticast mode [ 69.433646][ T59] bridge_slave_0: left promiscuous mode [ 69.439588][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.537541][ T5588] loop3: detected capacity change from 0 to 128 [ 69.554974][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 69.573910][ T5588] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.600647][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.616015][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.626140][ T59] bond0 (unregistering): Released all slaves [ 69.639449][ T5593] netlink: 9 bytes leftover after parsing attributes in process `syz.1.630'. [ 69.664215][ T5593] 0{X: entered promiscuous mode [ 69.669766][ T5593] 0{X: left allmulticast mode [ 69.677347][ T5593] netlink: 5 bytes leftover after parsing attributes in process `syz.1.630'. [ 69.686863][ T59] tipc: Left network mode [ 69.687704][ T5593] 1{X: renamed from 30{X [ 69.710442][ T5593] 1{X: left promiscuous mode [ 69.715669][ T5593] 1{X: entered allmulticast mode [ 69.729680][ T5593] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 69.747477][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 69.762197][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.793401][ T59] hsr_slave_0: left promiscuous mode [ 69.801963][ T59] hsr_slave_1: left promiscuous mode [ 69.807806][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.815379][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.824885][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.832382][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.845101][ T59] veth1_macvtap: left promiscuous mode [ 69.850825][ T59] veth0_macvtap: left promiscuous mode [ 69.856479][ T59] veth1_vlan: left promiscuous mode [ 69.861833][ T59] veth0_vlan: left promiscuous mode [ 69.951404][ T59] team0 (unregistering): Port device team_slave_1 removed [ 69.961225][ T59] team0 (unregistering): Port device team_slave_0 removed [ 70.010218][ T5409] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.038815][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.046020][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.099843][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.106903][ T5637] loop1: detected capacity change from 0 to 128 [ 70.113268][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.133723][ T5637] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.260040][ T3307] EXT4-fs unmount: 21 callbacks suppressed [ 70.260061][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.371394][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 70.371485][ T29] audit: type=1326 audit(1753653484.091:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.407995][ T29] audit: type=1326 audit(1753653484.131:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.431464][ T29] audit: type=1326 audit(1753653484.131:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.451416][ T5561] chnl_net:caif_netlink_parms(): no params data found [ 70.454798][ T29] audit: type=1326 audit(1753653484.131:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.485106][ T29] audit: type=1326 audit(1753653484.131:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.508444][ T29] audit: type=1326 audit(1753653484.131:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.531983][ T29] audit: type=1326 audit(1753653484.131:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.555425][ T29] audit: type=1326 audit(1753653484.131:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.578850][ T29] audit: type=1326 audit(1753653484.131:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.602520][ T29] audit: type=1326 audit(1753653484.131:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e2aae9a9 code=0x7ffc0000 [ 70.639604][ T5675] 1{X: entered promiscuous mode [ 70.645147][ T5675] 1{X: left allmulticast mode [ 70.668666][ T5675] 0{X: renamed from 31{X [ 70.686368][ T5675] 0{X: left promiscuous mode [ 70.691593][ T5675] 0{X: entered allmulticast mode [ 70.699246][ T5675] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 70.729157][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.758862][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.766127][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.791465][ T5561] bridge_slave_0: entered allmulticast mode [ 70.805504][ T5561] bridge_slave_0: entered promiscuous mode [ 70.838893][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.846085][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.895389][ T5561] bridge_slave_1: entered allmulticast mode [ 70.904799][ T5705] loop0: detected capacity change from 0 to 512 [ 70.910608][ T5561] bridge_slave_1: entered promiscuous mode [ 70.928751][ T5705] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.940352][ T5705] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 70.950590][ T5705] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.651: Corrupt directory, running e2fsck is recommended [ 70.966548][ T5705] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 70.975076][ T5705] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.651: corrupted in-inode xattr: invalid ea_ino [ 70.989766][ T5705] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.651: couldn't read orphan inode 15 (err -117) [ 71.011391][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.032640][ T5705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.046998][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.074945][ T5705] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.077538][ T5561] team0: Port device team_slave_0 added [ 71.086517][ T5705] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 71.102418][ T5705] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.651: Corrupt directory, running e2fsck is recommended [ 71.158391][ T5561] team0: Port device team_slave_1 added [ 71.188233][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.195352][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.221339][ T5561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.262222][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.269438][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.295493][ T5561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.307747][ T5729] __nla_validate_parse: 4 callbacks suppressed [ 71.307805][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 71.308150][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.375337][ T5729] bridge_slave_1: left allmulticast mode [ 71.381152][ T5729] bridge_slave_1: left promiscuous mode [ 71.387027][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.406828][ T5729] bridge_slave_0: left allmulticast mode [ 71.412549][ T5729] bridge_slave_0: left promiscuous mode [ 71.418426][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.477786][ T5561] hsr_slave_0: entered promiscuous mode [ 71.483952][ T5561] hsr_slave_1: entered promiscuous mode [ 71.505359][ T5561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.512969][ T5561] Cannot create hsr debugfs directory [ 71.564585][ T5409] veth0_vlan: entered promiscuous mode [ 71.598387][ T5409] veth1_vlan: entered promiscuous mode [ 71.713982][ T5409] veth0_macvtap: entered promiscuous mode [ 71.746764][ T5409] veth1_macvtap: entered promiscuous mode [ 71.798408][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 71.821168][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.849366][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.859948][ T5409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.868780][ T5409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.877795][ T5409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.886571][ T5409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004566][ T5783] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.052068][ T5561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.095903][ T5561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.117304][ T5561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.143868][ T5799] smc: net device bond0 applied user defined pnetid SYZ2 [ 72.152167][ T5561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.240801][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.256453][ T5561] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.285102][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.292354][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.328798][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.336105][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.369455][ T5561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.379974][ T5561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.438977][ T5836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 72.514351][ T5561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.636859][ T2996] udevd[2996]: worker [3707] terminated by signal 33 (Unknown signal 33) [ 72.670673][ T2996] udevd[2996]: worker [3707] failed while handling '/devices/virtual/block/loop0' [ 72.750813][ T5561] veth0_vlan: entered promiscuous mode [ 72.776854][ T5561] veth1_vlan: entered promiscuous mode [ 72.806537][ T5561] veth0_macvtap: entered promiscuous mode [ 72.825233][ T5561] veth1_macvtap: entered promiscuous mode [ 72.849199][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.871265][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.891139][ T5894] loop1: detected capacity change from 0 to 512 [ 72.898879][ T5561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907711][ T5561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.916458][ T5561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.925345][ T5561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.934902][ T5894] EXT4-fs: Ignoring removed oldalloc option [ 72.967073][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.993199][ T5894] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.054143][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.155770][ T5928] loop5: detected capacity change from 0 to 128 [ 73.169743][ T5928] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.188069][ T5928] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.224547][ T5409] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.279572][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'. [ 73.304178][ T5942] bridge_slave_1: left allmulticast mode [ 73.310080][ T5942] bridge_slave_1: left promiscuous mode [ 73.315926][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.326620][ T5942] bridge_slave_0: left allmulticast mode [ 73.332343][ T5942] bridge_slave_0: left promiscuous mode [ 73.338151][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.362761][ T5952] loop3: detected capacity change from 0 to 1024 [ 73.373072][ T5952] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 73.383226][ T5952] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.400988][ T5952] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.409400][ T5952] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.416160][ T5952] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.697: Inode bitmap for bg 0 marked uninitialized [ 73.430808][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.468679][ T5952] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 73.575609][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.851683][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 73.873418][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 73.892410][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 73.916104][ T5994] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.932088][ T5994] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.956554][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 73.978257][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 73.993717][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 74.000225][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 74.009776][ T5994] hsr0 speed is unknown, defaulting to 1000 [ 74.616174][ T6088] loop5: detected capacity change from 0 to 164 [ 74.628187][ T6088] bio_check_eod: 48 callbacks suppressed [ 74.628276][ T6088] syz.5.757: attempt to access beyond end of device [ 74.628276][ T6088] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.649175][ T6088] syz.5.757: attempt to access beyond end of device [ 74.649175][ T6088] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.708242][ T6092] netlink: 96 bytes leftover after parsing attributes in process `syz.5.759'. [ 74.844004][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 75.172315][ T6137] loop3: detected capacity change from 0 to 512 [ 75.183173][ T6137] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.203183][ T6137] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.780: bad orphan inode 13 [ 75.213619][ T6137] ext4_test_bit(bit=12, block=18) = 1 [ 75.219083][ T6137] is_bad_inode(inode)=0 [ 75.223273][ T6137] NEXT_ORPHAN(inode)=2130706432 [ 75.228233][ T6137] max_ino=32 [ 75.231461][ T6137] i_nlink=1 [ 75.245618][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.324070][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.384160][ T6164] bond1: entered promiscuous mode [ 75.389438][ T6164] bond1: entered allmulticast mode [ 75.396304][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.405971][ T6164] bond1 (unregistering): Released all slaves [ 75.439837][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 75.439873][ T29] audit: type=1326 audit(1753653489.161:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 75.470400][ T29] audit: type=1326 audit(1753653489.181:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 75.493794][ T29] audit: type=1326 audit(1753653489.191:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 75.517198][ T29] audit: type=1326 audit(1753653489.191:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc53de9a9 code=0x7ffc0000 [ 75.523015][ T6174] loop2: detected capacity change from 0 to 512 [ 75.591433][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.797: casefold flag without casefold feature [ 75.624579][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.797: couldn't read orphan inode 15 (err -117) [ 75.650886][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.692809][ T5561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.710970][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.5.806'. [ 75.773883][ T29] audit: type=1400 audit(1753653489.491:1496): avc: denied { bind } for pid=6198 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.848825][ T6209] loop5: detected capacity change from 0 to 1024 [ 75.870696][ T6209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.916018][ T6209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.935572][ T6216] netlink: 'syz.2.814': attribute type 17 has an invalid length. [ 75.943666][ T6216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.814'. [ 75.955964][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.009946][ T6222] loop1: detected capacity change from 0 to 1024 [ 76.066802][ T5409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.079652][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.105144][ T29] audit: type=1400 audit(1753653489.821:1497): avc: denied { validate_trans } for pid=6231 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.161534][ T6222] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 76.219924][ T29] audit: type=1400 audit(1753653489.941:1498): avc: denied { map } for pid=6221 comm="syz.1.816" path="/206/file1/hugetlb.1GB.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.257942][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.278010][ T29] audit: type=1326 audit(1753653490.001:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 76.301464][ T29] audit: type=1326 audit(1753653490.001:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 76.327488][ T29] audit: type=1326 audit(1753653490.001:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 76.448692][ T6259] smc: net device bond0 erased user defined pnetid SYZ2 [ 76.605261][ T6276] lo: Caught tx_queue_len zero misconfig [ 76.611145][ T6276] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.647065][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.841'. [ 76.693628][ T6284] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 76.702221][ T6280] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.798593][ T6304] syzkaller1: entered promiscuous mode [ 76.804195][ T6304] syzkaller1: entered allmulticast mode [ 76.863466][ T6308] loop5: detected capacity change from 0 to 512 [ 76.874302][ T6308] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #17: comm syz.5.853: iget: bogus i_mode (0) [ 76.894032][ T6308] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.853: couldn't read orphan inode 17 (err -117) [ 76.906553][ T6308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.926428][ T6308] batman_adv: batadv0: Adding interface: ipvlan2 [ 76.932927][ T6308] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.958627][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.969235][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.987447][ T6308] batman_adv: batadv0: Interface activated: ipvlan2 [ 77.008950][ T5409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.074418][ T6322] xt_hashlimit: size too large, truncated to 1048576 [ 77.192085][ T6330] syzkaller1: entered promiscuous mode [ 77.197788][ T6330] syzkaller1: entered allmulticast mode [ 77.250893][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.5.863'. [ 77.259939][ T6334] netlink: 'syz.5.863': attribute type 7 has an invalid length. [ 77.267788][ T6334] netlink: 'syz.5.863': attribute type 8 has an invalid length. [ 77.275637][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 77.286630][ T6335] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.862'. [ 77.295834][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 77.561199][ T6352] capability: warning: `syz.3.871' uses 32-bit capabilities (legacy support in use) [ 78.271526][ T6401] ALSA: seq fatal error: cannot create timer (-19) [ 78.770710][ T6467] loop2: detected capacity change from 0 to 164 [ 78.794398][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.814438][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.830121][ T6467] Symlink component flag not implemented [ 78.835917][ T6467] Symlink component flag not implemented [ 78.842151][ T6467] Symlink component flag not implemented (7) [ 78.848247][ T6467] Symlink component flag not implemented (116) [ 78.913955][ T6481] loop3: detected capacity change from 0 to 1024 [ 78.939885][ T6481] EXT4-fs: Ignoring removed nobh option [ 78.945561][ T6481] EXT4-fs: inline encryption not supported [ 79.005662][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.043713][ T6481] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.918: Allocating blocks 385-513 which overlap fs metadata [ 79.075622][ T6481] EXT4-fs (loop3): pa ffff88810061c770: logic 16, phys. 129, len 24 [ 79.083845][ T6481] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 79.135478][ T6481] syz.3.918 (6481) used greatest stack depth: 9576 bytes left [ 79.149222][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.173815][ T6502] SELinux: failed to load policy [ 79.218394][ T6513] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 79.331869][ T6531] loop9: detected capacity change from 0 to 7 [ 79.347569][ T6531] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.364837][ T6531] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.372828][ T6531] loop9: unable to read partition table [ 79.412857][ T6531] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 79.412857][ T6531] ) failed (rc=-5) [ 79.419963][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.477660][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.495176][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.505238][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.513239][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.657551][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.938'. [ 79.677450][ T6589] netlink: 64 bytes leftover after parsing attributes in process `syz.5.938'. [ 79.770821][ T6596] syzkaller1: entered promiscuous mode [ 79.776475][ T6596] syzkaller1: entered allmulticast mode [ 80.105467][ T6612] syzkaller0: entered promiscuous mode [ 80.111073][ T6612] syzkaller0: entered allmulticast mode [ 80.152808][ T6621] bond_slave_0: entered promiscuous mode [ 80.158580][ T6621] bond_slave_1: entered promiscuous mode [ 80.165399][ T6621] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 80.173909][ T6621] bond_slave_0: left promiscuous mode [ 80.179347][ T6621] bond_slave_1: left promiscuous mode [ 80.211714][ T6623] bond0: Caught tx_queue_len zero misconfig [ 80.758614][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 80.758693][ T29] audit: type=1400 audit(1753653494.481:1545): avc: denied { listen } for pid=6663 comm="syz.3.971" lport=39563 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.903471][ T29] audit: type=1400 audit(1753653494.611:1546): avc: denied { setopt } for pid=6676 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.193414][ T6692] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 81.194414][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'. [ 81.201178][ T6692] netlink: 'syz.0.982': attribute type 9 has an invalid length. [ 81.201195][ T6692] netlink: 'syz.0.982': attribute type 10 has an invalid length. [ 81.201206][ T6692] netlink: 'syz.0.982': attribute type 11 has an invalid length. [ 81.201220][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 81.268347][ T6693] netlink: 'syz.3.981': attribute type 2 has an invalid length. [ 81.277746][ T6698] batadv_slave_1: entered promiscuous mode [ 81.295376][ T6698] batadv_slave_1: left promiscuous mode [ 81.369649][ T6705] ALSA: seq fatal error: cannot create timer (-16) [ 81.420873][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.421034][ T29] audit: type=1326 audit(1753653495.141:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.2.990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x0 [ 81.432510][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.630841][ T29] audit: type=1326 audit(1753653495.351:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.654584][ T29] audit: type=1326 audit(1753653495.351:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.678088][ T29] audit: type=1326 audit(1753653495.351:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.701667][ T29] audit: type=1326 audit(1753653495.351:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.725074][ T29] audit: type=1326 audit(1753653495.351:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.748797][ T29] audit: type=1326 audit(1753653495.351:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 81.772304][ T29] audit: type=1326 audit(1753653495.351:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 82.286971][ T6754] hsr0 speed is unknown, defaulting to 1000 [ 82.381039][ T6760] pim6reg: entered allmulticast mode [ 82.399504][ T6760] pim6reg: left allmulticast mode [ 82.627469][ T6770] netlink: 'syz.2.1021': attribute type 4 has an invalid length. [ 82.635344][ T6770] netlink: 'syz.2.1021': attribute type 9 has an invalid length. [ 82.643123][ T6770] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 82.651228][ T6770] netlink: 'syz.2.1021': attribute type 11 has an invalid length. [ 82.659093][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 83.133053][ T6802] loop3: detected capacity change from 0 to 2048 [ 83.184186][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.316626][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.653452][ T6844] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1041'. [ 83.831144][ T6855] capability: warning: `syz.2.1045' uses deprecated v2 capabilities in a way that may be insecure [ 83.941899][ T6863] loop2: detected capacity change from 0 to 256 [ 83.991302][ T6863] FAT-fs (loop2): Directory bread(block 64) failed [ 84.003534][ T6863] FAT-fs (loop2): Directory bread(block 65) failed [ 84.011769][ T6863] FAT-fs (loop2): Directory bread(block 66) failed [ 84.018407][ T6863] FAT-fs (loop2): Directory bread(block 67) failed [ 84.025406][ T6863] FAT-fs (loop2): Directory bread(block 68) failed [ 84.032110][ T6863] FAT-fs (loop2): Directory bread(block 69) failed [ 84.040660][ T6863] FAT-fs (loop2): Directory bread(block 70) failed [ 84.047556][ T6863] FAT-fs (loop2): Directory bread(block 71) failed [ 84.054764][ T6863] FAT-fs (loop2): Directory bread(block 72) failed [ 84.063555][ T6863] FAT-fs (loop2): Directory bread(block 73) failed [ 84.093465][ T6863] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 84.100929][ T6873] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 84.102178][ T6863] FAT-fs (loop2): Filesystem has been set read-only [ 84.126441][ T6863] syz.2.1050: attempt to access beyond end of device [ 84.126441][ T6863] loop2: rw=0, sector=1736, nr_sectors = 32 limit=256 [ 84.348003][ T6894] loop5: detected capacity change from 0 to 2048 [ 84.357977][ T6894] EXT4-fs: Ignoring removed nobh option [ 84.386802][ T6894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.419697][ T5409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.782588][ T6934] loop2: detected capacity change from 0 to 164 [ 84.825927][ T6934] syz.2.1081: attempt to access beyond end of device [ 84.825927][ T6934] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.841429][ T6936] syzkaller1: entered promiscuous mode [ 84.847012][ T6936] syzkaller1: entered allmulticast mode [ 84.854754][ T6934] syz.2.1081: attempt to access beyond end of device [ 84.854754][ T6934] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.101064][ T6958] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 85.349443][ T6971] hsr0 speed is unknown, defaulting to 1000 [ 85.461442][ T6978] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1098'. [ 85.471424][ T6977] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1098'. [ 85.595470][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1100'. [ 85.604586][ T6984] netlink: 'syz.2.1100': attribute type 7 has an invalid length. [ 85.612462][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 85.643580][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1103'. [ 85.765768][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 85.772492][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.780018][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 85.787786][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 85.794413][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.801973][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 85.819329][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 85.825904][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.833646][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 85.838960][ T7012] loop5: detected capacity change from 0 to 512 [ 85.852011][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 85.858625][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.866117][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 85.916590][ T7012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.931674][ T7012] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.942831][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 85.949488][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.957190][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 85.965281][ T1036] vhci_hcd: vhci_device speed not set [ 85.973357][ T7002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.983021][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 85.989673][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.997313][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 86.025251][ T1036] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 86.044611][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 86.051283][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 86.059482][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 86.073383][ T7029] vhci_hcd: connection closed [ 86.073421][ T7036] vhci_hcd: connection closed [ 86.073750][ T314] vhci_hcd: stop threads [ 86.087287][ T314] vhci_hcd: release socket [ 86.091726][ T314] vhci_hcd: disconnect device [ 86.096701][ T7024] vhci_hcd: connection closed [ 86.097116][ T7005] vhci_hcd: connection closed [ 86.097175][ T7003] vhci_hcd: connection reset by peer [ 86.097378][ T7013] vhci_hcd: connection closed [ 86.112517][ T7009] vhci_hcd: connection closed [ 86.135182][ T314] vhci_hcd: stop threads [ 86.144200][ T314] vhci_hcd: release socket [ 86.149259][ T314] vhci_hcd: disconnect device [ 86.188443][ T314] vhci_hcd: stop threads [ 86.192796][ T314] vhci_hcd: release socket [ 86.197329][ T314] vhci_hcd: disconnect device [ 86.215391][ T314] vhci_hcd: stop threads [ 86.219719][ T314] vhci_hcd: release socket [ 86.224190][ T314] vhci_hcd: disconnect device [ 86.244763][ T5409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.254284][ T314] vhci_hcd: stop threads [ 86.258823][ T314] vhci_hcd: release socket [ 86.263362][ T314] vhci_hcd: disconnect device [ 86.294824][ T314] vhci_hcd: stop threads [ 86.299211][ T314] vhci_hcd: release socket [ 86.303934][ T314] vhci_hcd: disconnect device [ 86.343000][ T314] vhci_hcd: stop threads [ 86.347341][ T314] vhci_hcd: release socket [ 86.351805][ T314] vhci_hcd: disconnect device [ 86.471934][ T7064] vlan2: entered allmulticast mode [ 86.477210][ T7064] syz_tun: entered allmulticast mode [ 86.689699][ T7089] loop3: detected capacity change from 0 to 1024 [ 86.701417][ T7089] EXT4-fs: Ignoring removed nobh option [ 86.707211][ T7089] EXT4-fs: inline encryption not supported [ 86.744765][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.779585][ T7089] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1137: Allocating blocks 385-513 which overlap fs metadata [ 86.920712][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 86.920730][ T29] audit: type=1326 audit(1753653500.641:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 86.950475][ T29] audit: type=1326 audit(1753653500.641:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 86.981194][ T29] audit: type=1326 audit(1753653500.701:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.004717][ T29] audit: type=1326 audit(1753653500.701:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.028256][ T29] audit: type=1326 audit(1753653500.701:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.029223][ T7141] batman_adv: batadv0: Adding interface: ipvlan2 [ 87.051937][ T29] audit: type=1326 audit(1753653500.701:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.051970][ T29] audit: type=1326 audit(1753653500.701:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.058471][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.081730][ T29] audit: type=1326 audit(1753653500.701:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.081768][ T29] audit: type=1326 audit(1753653500.701:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.081791][ T29] audit: type=1326 audit(1753653500.701:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014150e9a9 code=0x7ffc0000 [ 87.105234][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.204931][ T7089] EXT4-fs (loop3): pa ffff88810698d310: logic 16, phys. 129, len 24 [ 87.213055][ T7089] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 87.225098][ T7141] batman_adv: batadv0: Interface activated: ipvlan2 [ 87.268435][ T7089] wޣ (7089) used greatest stack depth: 9464 bytes left [ 87.320747][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.621657][ T7267] loop9: detected capacity change from 0 to 7 [ 88.629609][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.648032][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.656072][ T3297] loop9: unable to read partition table [ 88.671245][ T7267] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.687965][ T7269] loop2: detected capacity change from 0 to 1024 [ 88.695314][ T7269] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.701717][ T7267] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.713622][ T7267] loop9: unable to read partition table [ 88.729671][ T7267] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.729671][ T7267] ) failed (rc=-5) [ 88.743707][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.744505][ T7269] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1194: Invalid block bitmap block 0 in block_group 0 [ 88.751879][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.773254][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.781674][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.797998][ T7269] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1194: Failed to acquire dquot type 0 [ 88.815146][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.829039][ T7269] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1194: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.866575][ T7269] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1194: Invalid inode bitmap blk 0 in block_group 0 [ 88.886200][ T6566] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 88.897395][ T7269] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 88.915168][ T7269] EXT4-fs (loop2): 1 orphan inode deleted [ 88.921529][ T7269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.999702][ T7269] syz.2.1194 (7269) used greatest stack depth: 9336 bytes left [ 89.026592][ T5561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.054455][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 89.062106][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 89.069594][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 89.082415][ T2959] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 89.271578][ T7317] loop3: detected capacity change from 0 to 512 [ 89.307008][ T7317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.347957][ T7317] EXT4-fs (loop3): 1 truncate cleaned up [ 89.364206][ T7317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.416273][ T7317] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 89.416273][ T7317] program syz.3.1200 not setting count and/or reply_len properly [ 89.566146][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.925539][ T7378] vlan2: entered allmulticast mode [ 90.059233][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1205'. [ 90.068427][ T7410] validate_nla: 1 callbacks suppressed [ 90.068438][ T7410] netlink: 'syz.2.1205': attribute type 7 has an invalid length. [ 90.081704][ T7410] netlink: 'syz.2.1205': attribute type 8 has an invalid length. [ 90.089582][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 90.271634][ T7420] bond1: entered promiscuous mode [ 90.276894][ T7420] bond1: entered allmulticast mode [ 90.332096][ T7420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.358065][ T7420] bond1 (unregistering): Released all slaves [ 90.511368][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 90.567456][ T7438] batman_adv: batadv0: Interface deactivated: dummy0 [ 90.589622][ T7442] loop5: detected capacity change from 0 to 764 [ 90.656306][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 90.693739][ T7438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.704059][ T7438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.732975][ T7438] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.741483][ T7438] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.749976][ T7438] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.758412][ T7438] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.772913][ T7445] veth0: entered promiscuous mode [ 90.784505][ T7450] veth0 (unregistering): left promiscuous mode [ 90.895458][ T7463] syzkaller0: refused to change device tx_queue_len [ 90.955574][ T7471] bond2: entered promiscuous mode [ 90.960788][ T7471] bond2: entered allmulticast mode [ 90.980592][ T7471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.995698][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1229'. [ 90.995827][ T7471] bond2 (unregistering): Released all slaves [ 91.108693][ T1036] usb 5-1: enqueue for inactive port 0 [ 91.114225][ T1036] usb 5-1: enqueue for inactive port 0 [ 91.159667][ T7487] hsr0 speed is unknown, defaulting to 1000 [ 91.182907][ T7493] loop3: detected capacity change from 0 to 128 [ 91.195172][ T1036] vhci_hcd: vhci_device speed not set [ 91.292931][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 91.309140][ T7511] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 91.309140][ T7511] program syz.2.1244 not setting count and/or reply_len properly [ 91.758254][ T7560] vhci_hcd: invalid port number 96 [ 91.763424][ T7560] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 92.341805][ T7644] hsr0 speed is unknown, defaulting to 1000 [ 92.352901][ T7648] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 92.661902][ T7686] loop3: detected capacity change from 0 to 128 [ 92.686774][ T7686] @: renamed from vlan0 [ 92.751946][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 92.751964][ T29] audit: type=1326 audit(1753653506.471:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.810588][ T29] audit: type=1326 audit(1753653506.511:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.834173][ T29] audit: type=1326 audit(1753653506.511:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.857691][ T29] audit: type=1326 audit(1753653506.511:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.881294][ T29] audit: type=1326 audit(1753653506.511:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.904950][ T29] audit: type=1326 audit(1753653506.511:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.928757][ T29] audit: type=1326 audit(1753653506.511:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.952311][ T29] audit: type=1326 audit(1753653506.511:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 92.962330][ T7701] pimreg: entered allmulticast mode [ 92.975828][ T29] audit: type=1326 audit(1753653506.511:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 93.004752][ T29] audit: type=1326 audit(1753653506.511:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13fcae9a9 code=0x7ffc0000 [ 93.026851][ T7701] pimreg: left allmulticast mode [ 93.050486][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 93.053532][ T7697] hsr0 speed is unknown, defaulting to 1000 [ 93.059609][ T7703] netlink: 'syz.1.1288': attribute type 7 has an invalid length. [ 93.073335][ T7703] netlink: 'syz.1.1288': attribute type 8 has an invalid length. [ 93.081178][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 93.353639][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1300'. [ 93.392763][ T7727] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 93.430317][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 93.457205][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 93.463775][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.471327][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.486654][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 93.493279][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.500879][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.528424][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 93.535037][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.542677][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.570751][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 93.577391][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.584816][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.609231][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 93.615881][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.623519][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.631016][ T7732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.641619][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 93.648263][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.655878][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.665092][ T3394] vhci_hcd: vhci_device speed not set [ 93.676280][ T7732] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 93.683031][ T7732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.691224][ T7732] vhci_hcd vhci_hcd.0: Device attached [ 93.715693][ T7739] vhci_hcd: connection closed [ 93.715753][ T7749] vhci_hcd: connection closed [ 93.715808][ T7733] vhci_hcd: connection closed [ 93.720784][ T7745] vhci_hcd: connection closed [ 93.725662][ T3394] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 93.730510][ T7751] vhci_hcd: connection closed [ 93.734796][ T7737] vhci_hcd: connection closed [ 93.747175][ T7743] vhci_hcd: connection closed [ 93.752770][ T7734] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 93.764111][ T2913] vhci_hcd: stop threads [ 93.768500][ T2913] vhci_hcd: release socket [ 93.773038][ T2913] vhci_hcd: disconnect device [ 93.780599][ T2913] vhci_hcd: stop threads [ 93.784887][ T2913] vhci_hcd: release socket [ 93.789418][ T2913] vhci_hcd: disconnect device [ 93.807687][ T2913] vhci_hcd: stop threads [ 93.811992][ T2913] vhci_hcd: release socket [ 93.816473][ T2913] vhci_hcd: disconnect device [ 93.831185][ T2913] vhci_hcd: stop threads [ 93.835588][ T2913] vhci_hcd: release socket [ 93.840039][ T2913] vhci_hcd: disconnect device [ 93.846827][ T2913] vhci_hcd: stop threads [ 93.851124][ T2913] vhci_hcd: release socket [ 93.855717][ T2913] vhci_hcd: disconnect device [ 93.860860][ T2913] vhci_hcd: stop threads [ 93.865275][ T2913] vhci_hcd: release socket [ 93.869736][ T2913] vhci_hcd: disconnect device [ 93.875026][ T2913] vhci_hcd: stop threads [ 93.879333][ T2913] vhci_hcd: release socket [ 93.883767][ T2913] vhci_hcd: disconnect device [ 94.003544][ T1036] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 94.011182][ T1036] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 94.018723][ T1036] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 94.026736][ T1036] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 94.348050][ T7778] hsr0 speed is unknown, defaulting to 1000 [ 94.586838][ T7789] loop2: detected capacity change from 0 to 8192 [ 94.686510][ T7795] loop2: detected capacity change from 0 to 128 [ 94.705642][ T7795] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.721036][ T7795] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.833864][ T5561] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.875990][ T7807] ip6gre1: entered allmulticast mode [ 95.070313][ T7831] __nla_validate_parse: 5 callbacks suppressed [ 95.070340][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 95.111499][ T7831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.161942][ T7833] vlan2: entered allmulticast mode [ 95.167154][ T7833] bond1: entered allmulticast mode [ 95.199216][ T2959] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 95.206720][ T2959] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 95.214407][ T2959] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 95.253135][ T2959] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 95.434788][ T7844] hsr0 speed is unknown, defaulting to 1000 [ 95.548632][ T7844] infiniband syz!: set active [ 95.553425][ T7844] infiniband syz!: added team_slave_0 [ 95.570827][ T7844] RDS/IB: syz!: added [ 95.574875][ T7844] smc: adding ib device syz! with port count 1 [ 95.583123][ T7844] smc: ib device syz! port 1 has pnetid [ 95.801556][ T7855] netlink: 'syz.2.1351': attribute type 4 has an invalid length. [ 95.826613][ T7855] netlink: 'syz.2.1351': attribute type 4 has an invalid length. [ 96.643087][ T7896] 9pnet: p9_errstr2errno: server reported unknown error [ 96.656864][ T7898] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1370'. [ 97.091956][ T7940] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1386'. [ 97.107331][ T7933] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1386'. [ 97.127614][ T7942] vlan1: entered allmulticast mode [ 97.132821][ T7942] bridge_slave_0: entered allmulticast mode [ 97.364384][ T7972] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1403'. [ 97.374099][ T7970] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1403'. [ 97.493418][ T2959] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 97.501026][ T2959] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 97.508462][ T2959] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 97.518341][ T2959] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 97.703640][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 97.712680][ T7989] batman_adv: batadv0: Removing interface: dummy0 [ 97.719520][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.727543][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.766519][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 97.773115][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.780547][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.787787][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 97.794329][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.801859][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.808756][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 97.815369][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.823064][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.829835][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 97.836541][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.843993][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.850564][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 97.857255][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.864859][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.871161][ T7994] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.880323][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 97.886946][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.894364][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.901058][ T7994] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 97.907710][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 97.915957][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 97.922246][ T8007] vhci_hcd: connection closed [ 97.922370][ T7999] vhci_hcd: connection closed [ 97.922494][ T8001] vhci_hcd: connection closed [ 97.927360][ T8009] vhci_hcd: connection closed [ 97.934459][ T8004] vhci_hcd: connection closed [ 97.938930][ T7995] vhci_hcd: connection closed [ 97.941366][ T7997] vhci_hcd: connection closed [ 97.946401][ T3440] vhci_hcd: stop threads [ 97.959828][ T3440] vhci_hcd: release socket [ 97.964289][ T3440] vhci_hcd: disconnect device [ 97.965078][ T2959] vhci_hcd: vhci_device speed not set [ 97.969263][ T3440] vhci_hcd: stop threads [ 97.978656][ T3440] vhci_hcd: release socket [ 97.983120][ T3440] vhci_hcd: disconnect device [ 97.988133][ T3440] vhci_hcd: stop threads [ 97.992727][ T3440] vhci_hcd: release socket [ 97.997208][ T3440] vhci_hcd: disconnect device [ 98.002118][ T3440] vhci_hcd: stop threads [ 98.006452][ T3440] vhci_hcd: release socket [ 98.010866][ T3440] vhci_hcd: disconnect device [ 98.015848][ T3440] vhci_hcd: stop threads [ 98.020112][ T3440] vhci_hcd: release socket [ 98.024583][ T3440] vhci_hcd: disconnect device [ 98.025032][ T2959] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 98.029488][ T3440] vhci_hcd: stop threads [ 98.041075][ T3440] vhci_hcd: release socket [ 98.045621][ T3440] vhci_hcd: disconnect device [ 98.050612][ T3440] vhci_hcd: stop threads [ 98.054947][ T3440] vhci_hcd: release socket [ 98.059481][ T3440] vhci_hcd: disconnect device [ 98.287319][ T8023] vlan2: entered allmulticast mode [ 98.292799][ T8023] bridge_slave_0: entered allmulticast mode [ 98.346402][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 98.346419][ T29] audit: type=1326 audit(1753653512.071:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00e2aae9a9 code=0x0 [ 98.648441][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 98.701578][ T29] audit: type=1107 audit(1753653512.421:1751): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.719004][ T8045] xt_hashlimit: size too large, truncated to 1048576 [ 98.729095][ T29] audit: type=1326 audit(1753653512.451:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.752660][ T29] audit: type=1326 audit(1753653512.451:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.830821][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 98.855056][ T3394] usb 1-1: enqueue for inactive port 0 [ 98.860638][ T3394] usb 1-1: enqueue for inactive port 0 [ 98.866366][ T8050] : renamed from vxcan1 (while UP) [ 98.867386][ T29] audit: type=1326 audit(1753653512.501:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.895148][ T29] audit: type=1326 audit(1753653512.501:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.918580][ T29] audit: type=1326 audit(1753653512.501:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.942179][ T29] audit: type=1326 audit(1753653512.501:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.946894][ T3394] vhci_hcd: vhci_device speed not set [ 98.966007][ T29] audit: type=1326 audit(1753653512.501:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 98.994533][ T29] audit: type=1326 audit(1753653512.501:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.3.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93a10e9a9 code=0x7ffc0000 [ 99.086375][ T8058] netlink: 2032 bytes leftover after parsing attributes in process `syz.3.1431'. [ 99.466076][ T8073] netlink: 'syz.0.1438': attribute type 13 has an invalid length. [ 99.498814][ T8073] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 99.532979][ T8078] loop2: detected capacity change from 0 to 512 [ 99.568985][ T8078] EXT4-fs (loop2): 1 orphan inode deleted [ 99.575763][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.591494][ T3440] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 99.606065][ T8078] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.620475][ T8078] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.1440: iget: bogus i_mode (0) [ 99.667472][ T5561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.974324][ T8123] loop3: detected capacity change from 0 to 512 [ 99.988954][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.006354][ T8123] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.137567][ T8141] pim6reg1: entered promiscuous mode [ 100.142965][ T8141] pim6reg1: entered allmulticast mode [ 100.151799][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.238616][ T8158] __nla_validate_parse: 3 callbacks suppressed [ 100.238635][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1472'. [ 100.316789][ T6581] ================================================================== [ 100.324928][ T6581] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 100.332768][ T6581] [ 100.335104][ T6581] write to 0xffff8881190e3508 of 44 bytes by task 8166 on cpu 0: [ 100.342827][ T6581] tty_set_termios+0xc0/0x8c0 [ 100.347575][ T6581] set_termios+0x496/0x4e0 [ 100.352007][ T6581] tty_mode_ioctl+0x379/0x5c0 [ 100.356699][ T6581] ppp_asynctty_ioctl+0x13f/0x2d0 [ 100.361754][ T6581] tty_ioctl+0x845/0xb80 [ 100.366024][ T6581] __se_sys_ioctl+0xce/0x140 [ 100.370657][ T6581] __x64_sys_ioctl+0x43/0x50 [ 100.375261][ T6581] x64_sys_call+0x19a8/0x2fb0 [ 100.379954][ T6581] do_syscall_64+0xd2/0x200 [ 100.384471][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.390385][ T6581] [ 100.392718][ T6581] read to 0xffff8881190e3521 of 1 bytes by task 6581 on cpu 1: [ 100.400267][ T6581] ppp_asynctty_receive+0x790/0xd40 [ 100.405487][ T6581] tty_ldisc_receive_buf+0xbf/0xf0 [ 100.410802][ T6581] tty_port_default_receive_buf+0x59/0x90 [ 100.416563][ T6581] flush_to_ldisc+0x141/0x360 [ 100.421264][ T6581] process_scheduled_works+0x4cb/0x9d0 [ 100.426759][ T6581] worker_thread+0x582/0x770 [ 100.431384][ T6581] kthread+0x486/0x510 [ 100.435473][ T6581] ret_from_fork+0xda/0x150 [ 100.440171][ T6581] ret_from_fork_asm+0x1a/0x30 [ 100.444961][ T6581] [ 100.447301][ T6581] value changed: 0x11 -> 0x35 [ 100.452067][ T6581] [ 100.454395][ T6581] Reported by Kernel Concurrency Sanitizer on: [ 100.460568][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: kworker/u8:13 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 100.473259][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.483336][ T6581] Workqueue: events_unbound flush_to_ldisc [ 100.489177][ T6581] ================================================================== [ 103.105071][ T2959] usb 3-1: enqueue for inactive port 0 [ 103.110568][ T2959] usb 3-1: enqueue for inactive port 0 [ 103.185081][ T2959] vhci_hcd: vhci_device speed not set