last executing test programs: 1m44.004373499s ago: executing program 3 (id=3136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) msgsnd(0x0, 0x0, 0x8, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) 1m43.74100663s ago: executing program 3 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xffffffff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x0) 1m43.704149083s ago: executing program 3 (id=3140): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) msync(&(0x7f000083d000/0x4000)=nil, 0x4000, 0x7) 1m43.684092295s ago: executing program 3 (id=3143): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x221) 1m43.683574675s ago: executing program 3 (id=3144): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') statfs(0x0, 0x0) 1m43.272008228s ago: executing program 3 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) 1m43.271791378s ago: executing program 32 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) 1m30.699625099s ago: executing program 4 (id=3701): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xdfe6, 0x2}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r0, 0x8183, 0x3) 1m30.520147533s ago: executing program 4 (id=3710): prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 1m30.486535796s ago: executing program 4 (id=3712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 1m30.373876745s ago: executing program 4 (id=3721): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) rename(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00') 1m29.864241446s ago: executing program 4 (id=3739): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1m29.522998574s ago: executing program 4 (id=3755): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x400]}, 0x8, 0x80000) 1m29.502377956s ago: executing program 33 (id=3755): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x400]}, 0x8, 0x80000) 22.477608406s ago: executing program 6 (id=6189): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000100, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x100, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000380)={0x2, 0x1, 0x18, 0x8, 0xb9, 0x0}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 22.42331723s ago: executing program 6 (id=6195): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 22.226801576s ago: executing program 6 (id=6207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24040084}, 0x1004) 22.17588735s ago: executing program 6 (id=6211): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9GNuPy7tncr8fsmlM3PucJ7p7dNz7uk5cwOorMH0n1rE/oiYTiL6k/nFss7ICgcXnvfgz4/Opo8k6vXXfk8iyY7lz0+yr33ZyT0R8eMPSezrWF3vzNy1i+NTU5NXs/3h2UvTwzNz1w5fuDR+fvL85OXRF0ZPHD92/MTIkZau63rBsdM3332//5OxN7/56q9k5NtfxpI4GS9nT1x6HVtlMAYb35NkdVHfia2urCQd2c/J0pc46Sx44q42BsWG5a9fV0Q8Ef3REQ9fvP74+JVSgwO2VT2JqAMVlch/qKi8H5C/t1/5PrhWSq8EaIf7pxYGAFbnf+fC2GD0NMYGdj9IYumwThIRrY3MLbcnIu7eGbt57s7YzdjMOFzRGBOwKfM3IuLJovxPGvk/ED0x0Mj/2rKUS/sFZ7Kv6fFXW6x/ZRpvxzg8UGwh/3vWzP9okv9vLcn/t1usf/Dh5ju9y/K/t9VLAgAAAAAAgMq6fSoini/6+39tcf5PFMz/6YuIk1tQ/+CK/dV//6/d24JqgAL3T0W8VDj/t5bP/h3oyLb+05gP0JWcuzA1eSQi/hsRh6JrV7o/skYdhz/d92WzssFs/l/+SOu/m80FzOK417li7ejE+Oz4o143EHH/RsRThfN/k8X2Pylo/9PfB9MbrGPfs7fONCtbP/+B7VL/OuJgYfv/8K4Vydr35xhu9AeG817Bak9/+Nl3zepvNf9N/4dHl7b/u9fO/4Fk6f16ZjZfx9G5znqzslb7/93J641bznRnxz4Yn529OhLRnZzuSI8uOz66+ZjhcZTnQ54vaf4fembt8b+i/n9vRMyv+L+TP5avKc79/+++X5vFo/8P5Unzf2JT7f/mN0ZvDXzfrP6Ntf/HGm39oeyI8T9Y8EWept3LjxekY2dRUbvjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQS0i9kRSG1rcrtWGhiL6IuJ/sbs2dWVm9rlzV967PJGWNT7/v5Z/0m//wn6Sf/7/wJL90RX7RyNib0R83tHb2B86e2VqouyLBwAAAAAAAAAAAAAAAAAAgB2ir8n6/9RvHWVHB2y7zrIDAEpTkP8/lREH0H6ttf+7tjwOoP30/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7D1w++ckIuZf7G08Ut1ZWVepkQHbrVZ2AEBp3OIHqsvUH6gu7/GBZJ3ynqYnrXfmWqbPPsLJAAAAAAAAAAAAAFA5B/db/w9VZf0/VJf1/1Bd+fr/AyXHAbSf9/hArLOSv3D9/7pnAQAAAAAAAAAAAABbaWbu2sXxqanJqzbe2BlhtHOjXq9fT38Kdko8//KNfCr8TolnxUa+1m9jZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjunwAAAP//OKok1w==") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 22.039570112s ago: executing program 6 (id=6217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 21.748738655s ago: executing program 6 (id=6224): socket$unix(0x1, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 21.695390889s ago: executing program 34 (id=6224): socket$unix(0x1, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 1.660394056s ago: executing program 1 (id=7098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.373433609s ago: executing program 1 (id=7108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0xa0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.36025766s ago: executing program 1 (id=7110): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 1.248034989s ago: executing program 1 (id=7111): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 960.027482ms ago: executing program 1 (id=7124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) 799.503715ms ago: executing program 2 (id=7142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x294) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(r2, &(0x7f0000000600)=ANY=[@ANYRES16], 0x8, 0x800) 755.749959ms ago: executing program 2 (id=7144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x4, @loopback}, 0x1c) 742.84398ms ago: executing program 2 (id=7148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) 687.663945ms ago: executing program 2 (id=7153): mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setns(0xffffffffffffffff, 0x24020000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 615.81999ms ago: executing program 2 (id=7157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) 563.544454ms ago: executing program 2 (id=7160): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081) 479.604521ms ago: executing program 0 (id=7166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 474.261381ms ago: executing program 0 (id=7168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = getgid() setfsgid(r2) 401.209898ms ago: executing program 0 (id=7170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_selinux(r2, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x1) 400.763088ms ago: executing program 5 (id=7171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x400000200, 0x4}) 400.500748ms ago: executing program 5 (id=7172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 400.223998ms ago: executing program 0 (id=7173): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 331.712143ms ago: executing program 5 (id=7176): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 331.441903ms ago: executing program 5 (id=7177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x800, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) 331.143353ms ago: executing program 0 (id=7178): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) msgget$private(0x0, 0x3d8) 330.061663ms ago: executing program 5 (id=7179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)) 328.188964ms ago: executing program 0 (id=7180): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000340)=""/14, 0xe}], 0x2}}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 263.971779ms ago: executing program 5 (id=7182): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) creat(0x0, 0x0) 189.578185ms ago: executing program 7 (id=7189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 189.225965ms ago: executing program 1 (id=7190): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 119.92054ms ago: executing program 7 (id=7191): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x40000000, 0x80000800, 0x81, 0xfffffffb, 0xffffffff}) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x4}, 0x0, 0x0) 119.46435ms ago: executing program 7 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 107.510551ms ago: executing program 7 (id=7193): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 83.253954ms ago: executing program 7 (id=7194): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 7 (id=7195): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x1, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu<=0||!') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) kernel console output (not intermixed with test programs): ing removed nomblk_io_submit option [ 136.461050][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 136.461064][ T29] audit: type=1400 audit(1755836100.528:5449): avc: denied { read write } for pid=14793 comm="syz.6.4730" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.491556][ T29] audit: type=1400 audit(1755836100.528:5450): avc: denied { open } for pid=14793 comm="syz.6.4730" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.518445][ T29] audit: type=1400 audit(1755836100.585:5451): avc: denied { ioctl } for pid=14793 comm="syz.6.4730" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.568999][T14791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.583461][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 136.592752][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 136.606708][ T7689] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 136.619788][ T7689] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 136.632334][ T7689] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.632334][ T7689] [ 136.641989][ T7689] EXT4-fs (loop1): Total free blocks count 0 [ 136.648075][ T7689] EXT4-fs (loop1): Free/Dirty block details [ 136.653969][ T7689] EXT4-fs (loop1): free_blocks=0 [ 136.658946][ T7689] EXT4-fs (loop1): dirty_blocks=16016 [ 136.664334][ T7689] EXT4-fs (loop1): Block reservation details [ 136.670347][ T7689] EXT4-fs (loop1): i_reserved_data_blocks=16016 [ 136.694075][ T1692] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 136.707924][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.738185][T14807] syz_tun: entered allmulticast mode [ 136.758103][T14807] syz_tun: left allmulticast mode [ 136.769221][ T29] audit: type=1326 audit(1755836100.818:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.792908][ T29] audit: type=1326 audit(1755836100.837:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.818396][ T29] audit: type=1326 audit(1755836100.837:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.841948][ T29] audit: type=1326 audit(1755836100.837:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.866146][ T29] audit: type=1326 audit(1755836100.837:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.889714][ T29] audit: type=1326 audit(1755836100.837:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.914015][ T29] audit: type=1326 audit(1755836100.837:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.0.4737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 136.944136][T14815] netlink: 56 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 136.993810][T14823] syz_tun: entered promiscuous mode [ 137.001755][T14823] batadv_slave_0: entered promiscuous mode [ 137.008016][T14823] hsr1: entered allmulticast mode [ 137.013213][T14823] syz_tun: entered allmulticast mode [ 137.014188][T14827] loop1: detected capacity change from 0 to 1024 [ 137.018548][T14823] batadv_slave_0: entered allmulticast mode [ 137.026030][T14827] EXT4-fs: Ignoring removed orlov option [ 137.036516][T14827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.054606][T14827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.168899][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.240518][T14855] bridge0: port 3(batadv1) entered blocking state [ 137.247106][T14855] bridge0: port 3(batadv1) entered disabled state [ 137.259813][T14855] batadv1: entered allmulticast mode [ 137.265907][T14855] batadv1: entered promiscuous mode [ 137.780665][ T2660] batman_adv: batadv1: IGMP Querier appeared [ 137.786679][ T2660] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 137.967439][T14872] loop0: detected capacity change from 0 to 1024 [ 137.974424][T14872] EXT4-fs: Ignoring removed orlov option [ 137.980100][T14872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.995708][T14872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.119290][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.169577][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 138.178526][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4766'. [ 139.404555][T14926] netlink: 'syz.5.4787': attribute type 1 has an invalid length. [ 139.468219][T14937] syzkaller0: entered promiscuous mode [ 139.473797][T14937] syzkaller0: entered allmulticast mode [ 139.560882][T14947] smc: net device bond0 applied user defined pnetid SYZ0 [ 139.574867][T14947] smc: net device bond0 erased user defined pnetid SYZ0 [ 139.577540][T14949] loop6: detected capacity change from 0 to 2048 [ 139.612329][T14949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.972386][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.397448][T14997] openvswitch: netlink: Message has 6 unknown bytes. [ 140.409794][T15003] __nla_validate_parse: 7 callbacks suppressed [ 140.409809][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 140.425557][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4818'. [ 140.430897][T15001] syz_tun: entered promiscuous mode [ 140.440937][T15001] batadv_slave_0: entered promiscuous mode [ 140.447269][T15001] debugfs: 'hsr1' already exists in 'hsr' [ 140.453037][T15001] Cannot create hsr debugfs directory [ 140.458656][T15001] hsr1: entered allmulticast mode [ 140.463745][T15001] syz_tun: entered allmulticast mode [ 140.466871][T15005] loop0: detected capacity change from 0 to 2048 [ 140.469087][T15001] batadv_slave_0: entered allmulticast mode [ 140.504713][T15005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.521556][T15010] netlink: 'syz.6.4823': attribute type 1 has an invalid length. [ 140.730668][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.732623][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4834'. [ 140.749295][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4834'. [ 140.780387][T15042] syz_tun: entered promiscuous mode [ 140.786539][T15042] batadv_slave_0: entered promiscuous mode [ 140.794304][T15042] debugfs: 'hsr1' already exists in 'hsr' [ 140.800055][T15042] Cannot create hsr debugfs directory [ 140.806199][T15042] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 140.816343][T15042] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.828681][T15042] hsr1: entered allmulticast mode [ 140.833825][T15042] syz_tun: entered allmulticast mode [ 140.839474][T15042] batadv_slave_0: entered allmulticast mode [ 140.965901][T15059] netlink: 'syz.2.4846': attribute type 1 has an invalid length. [ 140.973845][T15059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4846'. [ 141.478972][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 141.487954][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4862'. [ 141.509170][T15079] netlink: 468 bytes leftover after parsing attributes in process `syz.1.4854'. [ 141.551565][T15082] SELinux: failed to load policy [ 141.697381][T15092] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 141.705822][T15092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4858'. [ 141.864226][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 141.864239][ T29] audit: type=1400 audit(1755836873.862:5546): avc: denied { write } for pid=15108 comm="syz.1.4868" name="unix" dev="proc" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 142.286113][T15116] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4871'. [ 142.572339][T15175] netlink: 'syz.1.4873': attribute type 1 has an invalid length. [ 142.870452][ T29] audit: type=1326 audit(1755836874.920:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fada4445ba7 code=0x7ffc0000 [ 142.918542][ T29] audit: type=1326 audit(1755836874.920:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fada43eade9 code=0x7ffc0000 [ 142.941992][ T29] audit: type=1326 audit(1755836874.920:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fada4445ba7 code=0x7ffc0000 [ 142.965420][ T29] audit: type=1326 audit(1755836874.920:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fada43eade9 code=0x7ffc0000 [ 142.989139][ T29] audit: type=1326 audit(1755836874.920:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 143.012700][ T29] audit: type=1326 audit(1755836874.920:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 143.036163][ T29] audit: type=1326 audit(1755836874.931:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 143.059742][ T29] audit: type=1326 audit(1755836874.931:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fada4445ba7 code=0x7ffc0000 [ 143.083434][ T29] audit: type=1326 audit(1755836874.931:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15209 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fada43eade9 code=0x7ffc0000 [ 143.161330][T15166] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 143.444573][T15263] lo speed is unknown, defaulting to 1000 [ 143.745644][T15276] loop6: detected capacity change from 0 to 512 [ 143.753155][T15276] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 143.768861][T15276] EXT4-fs (loop6): 1 truncate cleaned up [ 143.776544][T15276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.957217][T15276] EXT4-fs error (device loop6): __ext4_remount:6740: comm syz.6.4916: Abort forced by user [ 143.973082][T15302] netlink: 'syz.1.4928': attribute type 3 has an invalid length. [ 143.984808][T15308] loop0: detected capacity change from 0 to 128 [ 144.031269][T15276] EXT4-fs (loop6): Remounting filesystem read-only [ 144.037851][T15276] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 144.129042][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.200557][ T7681] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 144.265773][T15338] lo speed is unknown, defaulting to 1000 [ 144.371635][T15333] loop2: detected capacity change from 0 to 32768 [ 144.585355][T15315] bio_check_eod: 135 callbacks suppressed [ 144.585370][T15315] syz.0.4941: attempt to access beyond end of device [ 144.585370][T15315] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 144.604630][T15315] buffer_io_error: 60 callbacks suppressed [ 144.604645][T15315] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 144.619166][T15308] syz.0.4941: attempt to access beyond end of device [ 144.619166][T15308] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 144.632620][T15308] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 144.642876][T15315] syz.0.4941: attempt to access beyond end of device [ 144.642876][T15315] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 144.656309][T15315] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 144.932084][T15358] netlink: 'syz.6.4954': attribute type 1 has an invalid length. [ 144.965883][T15367] netlink: 'syz.5.4960': attribute type 10 has an invalid length. [ 144.983637][T15367] team0: Port device dummy0 added [ 144.993042][T15367] netlink: 'syz.5.4960': attribute type 10 has an invalid length. [ 145.003837][T15367] team0: Port device dummy0 removed [ 145.011931][T15367] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.231021][T15390] lo speed is unknown, defaulting to 1000 [ 145.241083][T15394] loop5: detected capacity change from 0 to 512 [ 145.276281][T15394] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.4969: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 145.308479][T15380] loop0: detected capacity change from 0 to 32768 [ 145.317196][T15394] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.4969: Bad quota inode: 3, type: 0 [ 145.356729][T15394] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 145.373151][T15394] EXT4-fs (loop5): mount failed [ 145.926267][T15428] loop0: detected capacity change from 0 to 164 [ 145.966802][T15428] syz.0.4981: attempt to access beyond end of device [ 145.966802][T15428] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.011683][T15428] syz.0.4981: attempt to access beyond end of device [ 146.011683][T15428] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.446947][T15455] block device autoloading is deprecated and will be removed. [ 146.748405][T15463] loop1: detected capacity change from 0 to 164 [ 146.786400][T15463] syz.1.4999: attempt to access beyond end of device [ 146.786400][T15463] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.810194][T15463] syz.1.4999: attempt to access beyond end of device [ 146.810194][T15463] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.848496][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 146.848511][ T29] audit: type=1326 audit(2000000001.449:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab6d445ba7 code=0x7ffc0000 [ 146.914796][ T29] audit: type=1326 audit(2000000001.491:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6d3eade9 code=0x7ffc0000 [ 146.938969][ T29] audit: type=1326 audit(2000000001.491:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab6d445ba7 code=0x7ffc0000 [ 146.962527][ T29] audit: type=1326 audit(2000000001.491:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6d3eade9 code=0x7ffc0000 [ 146.986689][ T29] audit: type=1326 audit(2000000001.491:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 147.010256][ T29] audit: type=1326 audit(2000000001.491:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 147.034621][ T29] audit: type=1326 audit(2000000001.491:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab6d445ba7 code=0x7ffc0000 [ 147.058217][ T29] audit: type=1326 audit(2000000001.491:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6d3eade9 code=0x7ffc0000 [ 147.081604][ T29] audit: type=1326 audit(2000000001.491:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab6d445ba7 code=0x7ffc0000 [ 147.105732][ T29] audit: type=1326 audit(2000000001.491:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15466 comm="syz.0.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6d3eade9 code=0x7ffc0000 [ 147.174538][T15477] netlink: 'syz.2.5004': attribute type 10 has an invalid length. [ 147.183606][T15477] team0: Port device dummy0 added [ 147.190122][T15477] netlink: 'syz.2.5004': attribute type 10 has an invalid length. [ 147.215948][T15477] team0: Port device dummy0 removed [ 147.225795][T15477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.306864][T15494] loop2: detected capacity change from 0 to 512 [ 147.314467][T15494] EXT4-fs: Ignoring removed oldalloc option [ 147.330086][T15494] EXT4-fs (loop2): 1 truncate cleaned up [ 147.338872][T15494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.354579][T15494] EXT4-fs (loop2): shut down requested (2) [ 147.374003][T15494] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 147.406083][T15494] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 147.481241][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.812277][T15521] loop2: detected capacity change from 0 to 512 [ 147.821009][T15521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.920708][T15521] EXT4-fs (loop2): 1 truncate cleaned up [ 147.926955][T15521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.951757][T15521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.971759][T15537] loop6: detected capacity change from 0 to 164 [ 147.981692][T15537] syz.6.5031: attempt to access beyond end of device [ 147.981692][T15537] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 148.001861][T15537] syz.6.5031: attempt to access beyond end of device [ 148.001861][T15537] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 148.115712][T15547] __nla_validate_parse: 8 callbacks suppressed [ 148.115728][T15547] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5036'. [ 148.306087][ T3385] Process accounting resumed [ 148.522152][T15598] netlink: 'syz.2.5059': attribute type 21 has an invalid length. [ 148.549659][T15598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5059'. [ 148.558833][T15598] netlink: 'syz.2.5059': attribute type 1 has an invalid length. [ 148.659637][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5066'. [ 148.668654][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5066'. [ 148.698802][T15623] loop2: detected capacity change from 0 to 512 [ 148.706728][T15619] loop5: detected capacity change from 0 to 512 [ 148.713255][T15623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.724444][T15623] EXT4-fs (loop2): 1 truncate cleaned up [ 148.730423][T15619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.741129][T15623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.756333][T15619] EXT4-fs (loop5): 1 truncate cleaned up [ 148.763336][T15619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.788078][T15619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.876183][T15623] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.5070: Abort forced by user [ 148.948302][T15623] EXT4-fs (loop2): Remounting filesystem read-only [ 148.954833][T15623] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.077732][T15660] loop0: detected capacity change from 0 to 512 [ 149.104855][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.108650][T15660] EXT4-fs: Ignoring removed oldalloc option [ 149.143251][T15660] EXT4-fs (loop0): 1 truncate cleaned up [ 149.149561][T15660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.176131][T15660] EXT4-fs (loop0): shut down requested (2) [ 149.187857][T15671] loop1: detected capacity change from 0 to 164 [ 149.199687][T15660] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 149.215976][T15660] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 149.226055][T15671] syz.1.5099: attempt to access beyond end of device [ 149.226055][T15671] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.251453][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.333528][T15697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.423500][T15711] loop1: detected capacity change from 0 to 512 [ 149.430473][T15711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.441835][T15711] EXT4-fs (loop1): 1 truncate cleaned up [ 149.448130][T15711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.461964][T15711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.578849][T15730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5118'. [ 149.588036][T15730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5118'. [ 149.615465][T15734] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 149.994574][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5127'. [ 150.030985][T15757] netlink: 'syz.5.5129': attribute type 13 has an invalid length. [ 150.042331][T15757] gretap0: refused to change device tx_queue_len [ 150.049260][T15757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.106270][T15762] loop5: detected capacity change from 0 to 164 [ 150.129023][T15762] bio_check_eod: 1 callbacks suppressed [ 150.129038][T15762] syz.5.5133: attempt to access beyond end of device [ 150.129038][T15762] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.149943][T15762] syz.5.5133: attempt to access beyond end of device [ 150.149943][T15762] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.228003][T15773] SELinux: failed to load policy [ 150.234158][T15772] loop6: detected capacity change from 0 to 512 [ 150.243438][T15772] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.266718][T15772] EXT4-fs (loop6): 1 truncate cleaned up [ 150.280866][T15772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.368212][T15792] loop2: detected capacity change from 0 to 164 [ 150.378224][T15792] syz.2.5148: attempt to access beyond end of device [ 150.378224][T15792] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.393717][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.402808][T15792] syz.2.5148: attempt to access beyond end of device [ 150.402808][T15792] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.453089][T15796] SELinux: failed to load policy [ 150.559085][T15815] loop5: detected capacity change from 0 to 512 [ 150.576139][T15815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.593439][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 150.603050][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 150.614917][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 150.623644][T15815] EXT4-fs (loop5): 1 truncate cleaned up [ 150.629901][T15815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.705409][T15835] SELinux: failed to load policy [ 150.750638][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.763637][T15844] netlink: 'syz.6.5169': attribute type 10 has an invalid length. [ 150.795712][T15844] team0: Port device dummy0 added [ 150.812370][T15854] netlink: 'syz.6.5169': attribute type 10 has an invalid length. [ 150.823280][T15854] team0: Port device dummy0 removed [ 150.830509][T15854] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.896130][T15866] sctp: [Deprecated]: syz.2.5179 (pid 15866) Use of int in max_burst socket option. [ 150.896130][T15866] Use struct sctp_assoc_value instead [ 151.111922][T15890] loop6: detected capacity change from 0 to 128 [ 151.219993][T15900] netlink: 'syz.1.5192': attribute type 10 has an invalid length. [ 151.234276][T15900] team0: Port device dummy0 added [ 151.244934][T15898] serio: Serial port ptm1 [ 151.253602][T15900] netlink: 'syz.1.5192': attribute type 10 has an invalid length. [ 151.265560][T15900] team0: Port device dummy0 removed [ 151.275512][T15900] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.469501][T15896] syz.6.5190: attempt to access beyond end of device [ 151.469501][T15896] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 151.483098][T15896] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 151.493949][T15896] syz.6.5190: attempt to access beyond end of device [ 151.493949][T15896] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 151.507390][T15896] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 151.649769][T15920] sctp: [Deprecated]: syz.6.5203 (pid 15920) Use of int in max_burst socket option. [ 151.649769][T15920] Use struct sctp_assoc_value instead [ 151.671763][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 151.671778][ T29] audit: type=1400 audit(2000000006.522:5922): avc: denied { append } for pid=15921 comm="syz.5.5204" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.750768][T15929] loop5: detected capacity change from 0 to 1024 [ 151.758359][T15929] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.772601][ T29] audit: type=1400 audit(2000000006.627:5923): avc: denied { create } for pid=15931 comm="syz.6.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.796128][T15929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.811842][T15929] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 151.821859][ T29] audit: type=1400 audit(2000000006.659:5924): avc: denied { bind } for pid=15931 comm="syz.6.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.844658][T15929] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.5207: missing EA_INODE flag [ 151.856509][T15929] EXT4-fs (loop5): Remounting filesystem read-only [ 151.872823][ T29] audit: type=1326 audit(2000000006.701:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.874701][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.896706][ T29] audit: type=1326 audit(2000000006.701:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.896734][ T29] audit: type=1326 audit(2000000006.701:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.896769][ T29] audit: type=1326 audit(2000000006.701:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.896795][ T29] audit: type=1326 audit(2000000006.701:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.896851][ T29] audit: type=1326 audit(2000000006.701:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 151.896876][ T29] audit: type=1326 audit(2000000006.701:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.6.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 152.154368][T15959] lo speed is unknown, defaulting to 1000 [ 152.207282][T15972] netlink: 'syz.6.5221': attribute type 13 has an invalid length. [ 152.220642][T15970] serio: Serial port ptm0 [ 152.294410][T15972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.393183][T15993] loop6: detected capacity change from 0 to 1024 [ 152.406489][T15993] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.472101][T15993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.544652][T15993] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 152.564236][T15993] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.5235: missing EA_INODE flag [ 152.590568][T16021] lo speed is unknown, defaulting to 1000 [ 152.605665][T15993] EXT4-fs (loop6): Remounting filesystem read-only [ 152.640366][T16032] netlink: 'syz.5.5247': attribute type 13 has an invalid length. [ 152.649556][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.712064][T16032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.778657][T16044] bond1: entered promiscuous mode [ 152.783793][T16044] bond1: entered allmulticast mode [ 152.789467][T16044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.808070][T16044] bond1 (unregistering): Released all slaves [ 152.911147][T16062] netlink: 'syz.2.5274': attribute type 10 has an invalid length. [ 152.919119][T16062] __nla_validate_parse: 16 callbacks suppressed [ 152.919135][T16062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5274'. [ 152.936231][T16062] dummy0: entered promiscuous mode [ 152.942850][T16062] bond0: (slave dummy0): Releasing backup interface [ 152.950392][T16062] bridge0: port 4(dummy0) entered blocking state [ 152.957505][T16062] bridge0: port 4(dummy0) entered disabled state [ 152.964017][T16062] dummy0: entered allmulticast mode [ 152.997235][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5264'. [ 152.999609][T16071] netlink: 51563 bytes leftover after parsing attributes in process `syz.2.5266'. [ 153.536023][T16127] serio: Serial port ptm0 [ 153.744071][T16139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5303'. [ 153.764400][T16140] loop6: detected capacity change from 0 to 512 [ 153.785292][T16140] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 153.795654][T16140] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.804491][T16140] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5302: corrupted inode contents [ 153.822181][T16140] EXT4-fs (loop6): Remounting filesystem read-only [ 153.831002][T16140] EXT4-fs (loop6): 1 truncate cleaned up [ 153.838708][ T3450] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.849353][ T3450] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.869347][ T3450] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 153.880530][T16140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.916211][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.120638][T16178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5318'. [ 154.143089][T16181] bond4: entered promiscuous mode [ 154.148243][T16181] bond4: entered allmulticast mode [ 154.155053][T16181] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.165068][T16181] bond4 (unregistering): Released all slaves [ 154.193000][T16188] loop5: detected capacity change from 0 to 1024 [ 154.199856][T16188] EXT4-fs: Ignoring removed bh option [ 154.206070][T16188] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.228207][T16188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.264622][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.284648][T16199] netlink: 'syz.5.5328': attribute type 10 has an invalid length. [ 154.292628][T16199] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5328'. [ 154.301689][T16199] dummy0: entered promiscuous mode [ 154.308432][T16199] bond0: (slave dummy0): Releasing backup interface [ 154.318207][T16199] bridge0: port 3(dummy0) entered blocking state [ 154.324581][T16199] bridge0: port 3(dummy0) entered disabled state [ 154.331141][T16199] dummy0: entered allmulticast mode [ 154.551709][T16246] serio: Serial port ptm0 [ 154.810181][T16260] loop5: detected capacity change from 0 to 2048 [ 154.822361][T16265] IPv6: Can't replace route, no match found [ 154.858729][T16260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.873964][T16260] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.944812][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.065496][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5371'. [ 155.166550][T16282] loop5: detected capacity change from 0 to 128 [ 155.300666][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 155.309575][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 155.460137][T16295] loop6: detected capacity change from 0 to 1024 [ 155.466986][T16295] EXT4-fs: Ignoring removed bh option [ 155.473434][T16295] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 155.492245][T16295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.580826][T16286] syz.5.5364: attempt to access beyond end of device [ 155.580826][T16286] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 155.594601][T16286] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 155.603868][T16282] syz.5.5364: attempt to access beyond end of device [ 155.603868][T16282] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 155.617344][T16282] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 155.629121][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.734410][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5384'. [ 155.928600][T16353] random: crng reseeded on system resumption [ 155.970447][T16359] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 156.120902][T16382] random: crng reseeded on system resumption [ 156.160387][T16384] program syz.0.5413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.252843][T16390] loop2: detected capacity change from 0 to 512 [ 156.272965][T16390] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.320976][T16390] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5417: Failed to acquire dquot type 1 [ 156.357595][T16390] EXT4-fs (loop2): 1 truncate cleaned up [ 156.373910][T16390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.420501][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.459565][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 156.459579][ T29] audit: type=1400 audit(2000000011.553:6367): avc: denied { tracepoint } for pid=16402 comm="syz.2.5421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.715126][ T29] audit: type=1400 audit(2000000011.815:6368): avc: denied { name_bind } for pid=16404 comm="syz.5.5423" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 156.846036][ T29] audit: type=1326 audit(2000000011.952:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 156.870310][ T29] audit: type=1326 audit(2000000011.952:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 156.893826][ T29] audit: type=1326 audit(2000000011.952:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 156.921456][ T29] audit: type=1326 audit(2000000012.036:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 156.949022][ T29] audit: type=1326 audit(2000000012.057:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff061da14a5 code=0x7ffc0000 [ 156.972627][ T29] audit: type=1326 audit(2000000012.057:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16419 comm="syz.5.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 157.000971][ T29] audit: type=1400 audit(2000000012.110:6375): avc: denied { create } for pid=16421 comm="syz.1.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.020638][ T29] audit: type=1400 audit(2000000012.110:6376): avc: denied { setopt } for pid=16421 comm="syz.1.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.208029][ T3388] hid_parser_main: 21 callbacks suppressed [ 157.208046][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.221492][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.229565][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.237115][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.244620][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.252697][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.260124][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.267513][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.274928][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.283041][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.293771][ T3388] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 157.529894][T10694] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 157.647182][T16497] lo speed is unknown, defaulting to 1000 [ 157.669989][T16497] lo speed is unknown, defaulting to 1000 [ 157.675915][T16497] lo speed is unknown, defaulting to 1000 [ 157.698296][T16497] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.718312][T16497] lo speed is unknown, defaulting to 1000 [ 157.729377][T16497] lo speed is unknown, defaulting to 1000 [ 157.751061][T16497] lo speed is unknown, defaulting to 1000 [ 157.801641][T16497] lo speed is unknown, defaulting to 1000 [ 157.823853][T16497] lo speed is unknown, defaulting to 1000 [ 157.943965][T16525] loop2: detected capacity change from 0 to 1024 [ 157.951019][T16525] EXT4-fs: Ignoring removed bh option [ 157.956723][T16525] EXT4-fs: Ignoring removed nobh option [ 158.117839][T16559] __nla_validate_parse: 21 callbacks suppressed [ 158.117890][T16559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5490'. [ 158.206629][T16567] loop5: detected capacity change from 0 to 1024 [ 158.218016][T16567] EXT4-fs: Ignoring removed bh option [ 158.224889][T16567] EXT4-fs: Ignoring removed nobh option [ 158.232253][T16572] SELinux: failed to load policy [ 158.248629][T16567] EXT4-fs mount: 2 callbacks suppressed [ 158.248644][T16567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.296213][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.419123][T16587] loop5: detected capacity change from 0 to 128 [ 158.458842][T16587] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.519142][T16587] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.617851][T11115] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.641745][T16601] loop5: detected capacity change from 0 to 1024 [ 158.653975][T16601] EXT4-fs: Ignoring removed orlov option [ 158.845234][T16601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.888234][T16601] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 158.923770][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.941807][T16618] netlink: 'syz.1.5516': attribute type 3 has an invalid length. [ 159.145135][T16644] SELinux: failed to load policy [ 159.292107][T16662] loop6: detected capacity change from 0 to 1024 [ 159.317053][T16662] EXT4-fs: Ignoring removed bh option [ 159.336285][T16662] EXT4-fs: Ignoring removed nobh option [ 159.341877][T16662] EXT4-fs: inline encryption not supported [ 159.363884][T16670] loop2: detected capacity change from 0 to 1024 [ 159.381147][T16670] EXT4-fs: Ignoring removed orlov option [ 159.383411][T16662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.403926][T16670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.450326][T16670] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.466340][T16662] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 159.512595][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.591002][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.452475][T16707] loop2: detected capacity change from 0 to 128 [ 160.668014][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5561'. [ 160.700009][T16724] sd 0:0:1:0: device reset [ 160.747964][T16741] raw_sendmsg: syz.5.5566 forgot to set AF_INET. Fix it! [ 160.859884][T16707] syz.2.5551: attempt to access beyond end of device [ 160.859884][T16707] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 160.873332][T16707] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 160.883258][T16716] syz.2.5551: attempt to access beyond end of device [ 160.883258][T16716] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 160.896695][T16716] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 160.907109][T16707] syz.2.5551: attempt to access beyond end of device [ 160.907109][T16707] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 160.920710][T16707] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 161.400177][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 161.400190][ T29] audit: type=1400 audit(2000000016.731:6490): avc: denied { validate_trans } for pid=16759 comm="syz.2.5575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.469884][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5577'. [ 161.494346][ T29] audit: type=1326 audit(2000000016.836:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.517885][ T29] audit: type=1326 audit(2000000016.836:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.562196][T16773] netlink: 664 bytes leftover after parsing attributes in process `syz.1.5581'. [ 161.564240][ T29] audit: type=1326 audit(2000000016.888:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.594817][ T29] audit: type=1326 audit(2000000016.888:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.618511][ T29] audit: type=1326 audit(2000000016.888:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.642050][ T29] audit: type=1326 audit(2000000016.888:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.665647][ T29] audit: type=1326 audit(2000000016.888:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.752840][ T29] audit: type=1326 audit(2000000017.046:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.776637][ T29] audit: type=1326 audit(2000000017.046:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.6.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7ffc0000 [ 161.913369][T16789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.074551][T16780] loop5: detected capacity change from 0 to 32768 [ 162.095956][T16780] loop5: p1 p3 < > [ 162.122467][T16804] netem: change failed [ 162.242274][T16825] serio: Serial port ptm0 [ 162.265530][T16829] rdma_op ffff888104242580 conn xmit_rdma 0000000000000000 [ 162.341482][T16839] loop5: detected capacity change from 0 to 2048 [ 162.379104][T16839] EXT4-fs (loop5): failed to initialize system zone (-117) [ 162.390995][T16839] EXT4-fs (loop5): mount failed [ 162.478622][T16854] ALSA: seq fatal error: cannot create timer (-19) [ 162.553662][T16833] loop6: detected capacity change from 0 to 32768 [ 162.613184][T16833] loop6: p1 p3 < > [ 162.631613][T16871] loop5: detected capacity change from 0 to 128 [ 162.787411][T16882] loop6: detected capacity change from 0 to 2048 [ 162.811711][T16882] EXT4-fs (loop6): failed to initialize system zone (-117) [ 162.824785][T16882] EXT4-fs (loop6): mount failed [ 162.907427][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5632'. [ 162.916813][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5632'. [ 162.925878][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5632'. [ 162.945936][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5632'. [ 162.954998][T16896] netlink: 'syz.0.5632': attribute type 6 has an invalid length. [ 163.047181][T16902] netem: change failed [ 163.262962][T16927] serio: Serial port ptm0 [ 163.294050][T16871] syz.5.5621: attempt to access beyond end of device [ 163.294050][T16871] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 163.307534][T16871] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 163.322829][T16879] syz.5.5621: attempt to access beyond end of device [ 163.322829][T16879] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 163.336282][T16879] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 163.352221][T16931] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 163.503536][T16946] ALSA: seq fatal error: cannot create timer (-19) [ 163.660676][T16969] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5664'. [ 163.669713][T16969] netem: unknown loss type 0 [ 163.991880][T16996] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5678'. [ 164.054739][T17002] lo speed is unknown, defaulting to 1000 [ 164.094741][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5683'. [ 164.103860][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5683'. [ 164.112827][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5683'. [ 164.155280][T17008] netlink: 'syz.6.5683': attribute type 6 has an invalid length. [ 164.164845][T17002] lo speed is unknown, defaulting to 1000 [ 164.265264][T17016] netem: unknown loss type 0 [ 164.269990][T17016] netem: change failed [ 164.376821][T17022] program syz.2.5689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.549272][T17036] netlink: 'syz.2.5695': attribute type 6 has an invalid length. [ 164.626932][T17038] lo speed is unknown, defaulting to 1000 [ 164.696515][T17042] bridge0: port 3(vlan2) entered blocking state [ 164.702815][T17042] bridge0: port 3(vlan2) entered disabled state [ 164.771599][T17042] vlan2: entered allmulticast mode [ 164.776738][T17042] bridge0: entered allmulticast mode [ 164.788785][T17042] vlan2: left allmulticast mode [ 164.793683][T17042] bridge0: left allmulticast mode [ 164.801426][T17038] lo speed is unknown, defaulting to 1000 [ 164.869896][T17055] program syz.6.5705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.938011][T17054] SELinux: failed to load policy [ 165.063693][T17078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17078 comm=syz.6.5715 [ 165.076284][T17078] netlink: 'syz.6.5715': attribute type 2 has an invalid length. [ 165.084002][T17078] netlink: 'syz.6.5715': attribute type 1 has an invalid length. [ 165.092494][T17078] netlink: 'syz.6.5715': attribute type 8 has an invalid length. [ 165.174257][T17088] bridge0: port 4(vlan2) entered blocking state [ 165.180755][T17088] bridge0: port 4(vlan2) entered disabled state [ 165.187320][T17088] vlan2: entered allmulticast mode [ 165.192511][T17088] bridge0: entered allmulticast mode [ 165.200952][T17088] vlan2: left allmulticast mode [ 165.205834][T17088] bridge0: left allmulticast mode [ 165.675877][T17127] SELinux: failed to load policy [ 165.798789][T17138] openvswitch: netlink: Message has 6 unknown bytes. [ 165.859950][T17140] lo speed is unknown, defaulting to 1000 [ 165.913836][T17140] lo speed is unknown, defaulting to 1000 [ 166.083615][T17186] netlink: 'syz.6.5765': attribute type 12 has an invalid length. [ 166.195169][T17201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17201 comm=syz.5.5770 [ 166.208391][T17201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17201 comm=syz.5.5770 [ 166.280892][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 166.280907][ T29] audit: type=1400 audit(2000000021.856:6873): avc: denied { create } for pid=17209 comm="syz.5.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.311781][ T29] audit: type=1326 audit(2000000021.877:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.336211][ T29] audit: type=1326 audit(2000000021.877:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.359850][ T29] audit: type=1326 audit(2000000021.877:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.384010][ T29] audit: type=1326 audit(2000000021.877:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.407650][ T29] audit: type=1326 audit(2000000021.877:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.431877][ T29] audit: type=1326 audit(2000000021.877:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.455434][ T29] audit: type=1326 audit(2000000021.877:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.480007][ T29] audit: type=1326 audit(2000000021.877:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.2.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 166.503516][ T29] audit: type=1400 audit(2000000021.898:6882): avc: denied { setopt } for pid=17209 comm="syz.5.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.511512][T17223] lo speed is unknown, defaulting to 1000 [ 166.543225][T17219] loop5: detected capacity change from 0 to 512 [ 166.550818][T17219] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.599440][T17223] lo speed is unknown, defaulting to 1000 [ 166.642642][T17219] EXT4-fs (loop5): 1 truncate cleaned up [ 166.648965][T17219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.649999][T17239] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 166.686721][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.720410][T17249] hub 9-0:1.0: USB hub found [ 166.726130][T17249] hub 9-0:1.0: 8 ports detected [ 166.842241][T17264] lo speed is unknown, defaulting to 1000 [ 166.924601][T17264] lo speed is unknown, defaulting to 1000 [ 166.955665][T17258] loop2: detected capacity change from 0 to 32768 [ 167.009942][T17258] loop2: p1 p3 < > [ 167.536038][T17298] syz_tun (unregistering): left promiscuous mode [ 167.773344][T17312] __nla_validate_parse: 18 callbacks suppressed [ 167.773361][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5814'. [ 167.821950][T17312] vlan2: entered promiscuous mode [ 167.827097][T17312] gretap0: entered promiscuous mode [ 168.067387][T17335] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 168.183861][T17359] tmpfs: Bad value for 'mpol' [ 168.226651][T17361] lo speed is unknown, defaulting to 1000 [ 168.262145][T17361] lo speed is unknown, defaulting to 1000 [ 168.666553][T17318] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.674647][T17318] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.930245][T17397] geneve2: entered promiscuous mode [ 168.935573][T17397] geneve2: entered allmulticast mode [ 169.134132][T17410] netlink: 'syz.5.5858': attribute type 3 has an invalid length. [ 169.175021][T17410] netlink: 'syz.5.5858': attribute type 3 has an invalid length. [ 169.255231][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5865'. [ 169.399680][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5872'. [ 169.587856][T17474] loop5: detected capacity change from 0 to 512 [ 169.604504][T17474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.616551][T17474] EXT4-fs (loop5): 1 truncate cleaned up [ 169.623636][T17474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.649187][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.681265][ T3388] hid_parser_main: 42 callbacks suppressed [ 169.681284][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 169.694900][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.702285][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.710416][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.717860][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.725327][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.800281][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.807765][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.815211][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 169.823446][ T3388] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 169.841895][ T3388] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz1] on syz0 [ 169.921928][T17485] SELinux: ebitmap: truncated map [ 169.939513][T17485] SELinux: failed to load policy [ 170.252358][T17520] batman_adv: batadv0: Adding interface: ipvlan2 [ 170.258777][T17520] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.285145][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.295683][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.307129][T17520] batman_adv: batadv0: Interface activated: ipvlan2 [ 170.424311][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5914'. [ 170.482599][T17545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17545 comm=syz.2.5917 [ 170.495378][T17511] loop6: detected capacity change from 0 to 32768 [ 170.531326][T17553] loop2: detected capacity change from 0 to 256 [ 170.538150][T17511] loop6: p1 p3 < > [ 170.567144][T17553] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.576148][T17553] FAT-fs (loop2): Filesystem has been set read-only [ 170.656769][T17573] hub 9-0:1.0: USB hub found [ 170.661448][T17573] hub 9-0:1.0: 8 ports detected [ 170.752145][T17590] sd 0:0:1:0: device reset [ 170.775941][T17592] pim6reg: entered allmulticast mode [ 170.783569][T17592] pim6reg: left allmulticast mode [ 170.925959][T17609] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5943'. [ 170.936082][T17601] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5943'. [ 170.986355][T17616] loop6: detected capacity change from 0 to 128 [ 170.993718][T17616] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.006347][T17616] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.033743][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5950'. [ 171.042773][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5950'. [ 171.105155][T17627] loop6: detected capacity change from 0 to 1024 [ 171.111911][T17627] EXT4-fs: Ignoring removed bh option [ 171.117447][T17627] EXT4-fs: inline encryption not supported [ 171.123703][T17627] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.134930][T17627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 171.144273][T17627] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.5954: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.158549][T17627] __quota_error: 181 callbacks suppressed [ 171.158631][T17627] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 171.172983][T17627] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.5954: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.187203][T17627] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 171.195996][T17627] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5954: Failed to acquire dquot type 0 [ 171.208514][T17627] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 171.218054][T17627] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.5954: mark_inode_dirty error [ 171.229559][T17627] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 171.240144][T17627] EXT4-fs (loop6): 1 orphan inode deleted [ 171.246456][T17627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.264250][ T29] audit: type=1400 audit(170.111:7064): avc: denied { remount } for pid=17626 comm="syz.6.5954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.285414][T15147] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.299985][T15147] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 171.308582][T15147] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:41: Failed to release dquot type 0 [ 171.321497][T17627] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 171.341690][T12502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.489812][ T29] audit: type=1400 audit(170.342:7065): avc: denied { mount } for pid=17642 comm="syz.0.5960" name="/" dev="ramfs" ino=49968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 171.514799][ T29] audit: type=1326 audit(170.374:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.6.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36af1cebe9 code=0x7fc00000 [ 171.591138][ T29] audit: type=1326 audit(170.458:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 171.616295][ T29] audit: type=1326 audit(170.458:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 171.639437][ T29] audit: type=1326 audit(170.458:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 171.662420][ T29] audit: type=1326 audit(170.458:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17656 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 171.726468][T17662] random: crng reseeded on system resumption [ 171.737538][T17662] Restarting kernel threads ... [ 171.744682][T17662] Done restarting kernel threads. [ 171.916532][T17696] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5986'. [ 171.933079][T17698] loop2: detected capacity change from 0 to 1024 [ 171.945947][T17698] EXT4-fs: Ignoring removed orlov option [ 171.957537][T17698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.975490][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5989'. [ 171.994949][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.009264][T17707] futex_wake_op: syz.0.5992 tries to shift op by -1; fix this program [ 172.199899][ T3450] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.212723][T17731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.271085][T17738] wireguard0: entered promiscuous mode [ 172.276912][T17738] wireguard0: entered allmulticast mode [ 172.385483][T15147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.395744][T15147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.413340][T15147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.417523][T17769] loop6: detected capacity change from 0 to 128 [ 172.437636][T15147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.447550][T17769] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 172.456360][T17769] FAT-fs (loop6): Filesystem has been set read-only [ 172.459166][T17773] loop5: detected capacity change from 0 to 1024 [ 172.463920][T17769] FAT-fs (loop6): error, corrupted file size (i_pos 548, 514) [ 172.473630][T17773] EXT4-fs: Ignoring removed orlov option [ 172.494392][T17773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.543304][T17773] EXT4-fs: Ignoring sb option on remount [ 172.548988][T17773] EXT4-fs: Ignoring removed orlov option [ 172.566722][T17773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.576839][T17773] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 172.587873][T17773] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 172.606980][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.693916][T17800] __nla_validate_parse: 8 callbacks suppressed [ 172.693934][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6032'. [ 172.913911][T17832] netlink: 'syz.5.6047': attribute type 21 has an invalid length. [ 172.921928][T17832] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6047'. [ 172.963776][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6051'. [ 173.104210][T17861] hub 6-0:1.0: USB hub found [ 173.108950][T17861] hub 6-0:1.0: 8 ports detected [ 173.189136][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6069'. [ 173.281474][T17896] SELinux: failed to load policy [ 173.336480][T17903] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.344314][T17903] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 173.347754][T17905] netlink: 'syz.6.6081': attribute type 1 has an invalid length. [ 173.359147][T17905] netlink: 'syz.6.6081': attribute type 4 has an invalid length. [ 173.366856][T17905] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6081'. [ 173.579655][T17932] atomic_op ffff888104d95928 conn xmit_atomic 0000000000000000 [ 173.873727][T17961] netlink: 'syz.1.6107': attribute type 2 has an invalid length. [ 173.881497][T17961] netlink: 'syz.1.6107': attribute type 1 has an invalid length. [ 173.889795][T17961] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6107'. [ 174.003511][T17980] bond1: entered promiscuous mode [ 174.008664][T17980] bond1: entered allmulticast mode [ 174.013961][T17980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.023767][T17980] bond1 (unregistering): Released all slaves [ 174.181112][T17999] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 174.205918][T18003] loop0: detected capacity change from 0 to 512 [ 174.213170][T18003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.227722][T18003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.288564][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.375682][T18027] ALSA: seq fatal error: cannot create timer (-19) [ 174.394724][T18033] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 174.453571][T10692] hid_parser_main: 26 callbacks suppressed [ 174.453587][T10692] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 174.467150][T10692] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 174.477469][T10692] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 174.486409][T10692] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.570923][T18061] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6151'. [ 174.683657][T18082] loop5: detected capacity change from 0 to 736 [ 174.795867][T18104] loop0: detected capacity change from 0 to 512 [ 174.818034][T18104] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.828382][T18106] ref_ctr_offset mismatch. inode: 0x1a01 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 174.850703][T18104] EXT4-fs (loop0): 1 orphan inode deleted [ 174.856599][T18104] EXT4-fs (loop0): 1 truncate cleaned up [ 174.864529][T18104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.889196][T18104] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.910972][T18122] netlink: 'syz.1.6181': attribute type 1 has an invalid length. [ 174.921023][T18104] EXT4-fs (loop0): Remounting filesystem read-only [ 174.933357][T18104] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 174.985109][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.994259][T18127] loop2: detected capacity change from 0 to 8192 [ 175.344944][T18191] loop6: detected capacity change from 0 to 1024 [ 175.360501][T18191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.370788][T18191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.495373][T12502] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 175.528895][T12502] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 175.582193][T15261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.606376][T18215] loop0: detected capacity change from 0 to 1024 [ 175.613042][T18215] EXT4-fs: Ignoring removed nobh option [ 175.620716][T18215] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.632734][T18215] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.6221: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 175.654972][T18215] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6221: couldn't read orphan inode 11 (err -117) [ 175.669827][T18219] syzkaller1: entered promiscuous mode [ 175.675424][T18219] syzkaller1: entered allmulticast mode [ 175.681767][T18215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.797799][T18224] IPv6: Can't replace route, no match found [ 175.809093][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.848646][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.853670][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.856105][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.870995][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.878403][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.886370][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.893985][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.901392][T10692] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 175.918683][T10692] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.001619][T18234] lo speed is unknown, defaulting to 1000 [ 176.062408][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 176.062421][ T29] audit: type=1400 audit(175.142:7335): avc: denied { mount } for pid=18260 comm="syz.1.6239" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.070013][T18234] lo speed is unknown, defaulting to 1000 [ 176.163915][T18275] lo speed is unknown, defaulting to 1000 [ 176.201232][T18234] chnl_net:caif_netlink_parms(): no params data found [ 176.209975][T18275] lo speed is unknown, defaulting to 1000 [ 176.272652][T18234] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.279766][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.300947][T18234] bridge_slave_0: entered allmulticast mode [ 176.308630][T18234] bridge_slave_0: entered promiscuous mode [ 176.315444][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.322516][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.329677][T18234] bridge_slave_1: entered allmulticast mode [ 176.336429][T18234] bridge_slave_1: entered promiscuous mode [ 176.362336][ T29] audit: type=1326 audit(175.457:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.386071][ T29] audit: type=1326 audit(175.457:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.409601][ T29] audit: type=1326 audit(175.468:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.432568][ T29] audit: type=1326 audit(175.468:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.456154][ T29] audit: type=1326 audit(175.468:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.479119][ T29] audit: type=1326 audit(175.468:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.502086][ T29] audit: type=1326 audit(175.468:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.525707][ T29] audit: type=1326 audit(175.468:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.549357][ T29] audit: type=1326 audit(175.468:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18297 comm="syz.2.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fca7ebe9 code=0x7ffc0000 [ 176.591281][T18234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.603136][T18234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.667524][T18234] team0: Port device team_slave_0 added [ 176.685855][T18234] team0: Port device team_slave_1 added [ 176.707789][T18234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.714875][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.740952][T18234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.752203][T18234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.759225][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.785267][T18234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.822412][T18234] hsr_slave_0: entered promiscuous mode [ 176.836352][T18234] hsr_slave_1: entered promiscuous mode [ 176.842574][T18234] debugfs: 'hsr0' already exists in 'hsr' [ 176.848346][T18234] Cannot create hsr debugfs directory [ 176.906763][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6270'. [ 176.982492][ T3388] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 177.088697][T18359] openvswitch: netlink: Message has 6 unknown bytes. [ 177.450008][T18234] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.475220][T18234] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 177.496540][T18234] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.520745][T18234] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.576552][T18392] hub 9-0:1.0: USB hub found [ 177.582095][T18392] hub 9-0:1.0: 8 ports detected [ 177.617398][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.647525][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.665873][T15125] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.672968][T15125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.686012][T15125] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.693122][T15125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.874803][T18234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.933616][T18428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18428 comm=syz.1.6304 [ 177.946262][T18428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18428 comm=syz.1.6304 [ 178.124194][T18455] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 178.196591][T18234] veth0_vlan: entered promiscuous mode [ 178.202577][T18430] loop0: detected capacity change from 0 to 32768 [ 178.218010][T18234] veth1_vlan: entered promiscuous mode [ 178.225882][T18430] loop0: p1 p3 < > [ 178.259226][T18234] veth0_macvtap: entered promiscuous mode [ 178.267544][T18234] veth1_macvtap: entered promiscuous mode [ 178.285324][T18234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.299704][T18234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.332526][T15125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.348987][T15126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.359204][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6322'. [ 178.374224][T15125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.390931][T15125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.412840][T18472] vlan2: entered promiscuous mode [ 178.418666][T18472] gretap0: entered promiscuous mode [ 178.461535][T18485] tmpfs: Bad value for 'mpol' [ 178.516343][T18492] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6330'. [ 178.531021][T18495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6329'. [ 178.637825][T18512] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6340'. [ 178.714478][T18525] netlink: 292 bytes leftover after parsing attributes in process `syz.7.6346'. [ 178.724207][T18521] lo speed is unknown, defaulting to 1000 [ 178.804780][T18521] lo speed is unknown, defaulting to 1000 [ 178.858629][T18549] netlink: 'syz.0.6357': attribute type 1 has an invalid length. [ 179.500121][T18527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.508906][T18527] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.535900][T18556] loop7: detected capacity change from 0 to 736 [ 179.591116][T18569] netlink: 'syz.2.6363': attribute type 3 has an invalid length. [ 179.607488][T18569] netlink: 'syz.2.6363': attribute type 3 has an invalid length. [ 179.662698][T18575] bond4: entered promiscuous mode [ 179.667789][T18575] bond4: entered allmulticast mode [ 179.673886][T18575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.686759][T18575] bond4 (unregistering): Released all slaves [ 179.806701][T18588] geneve2: entered promiscuous mode [ 179.811945][T18588] geneve2: entered allmulticast mode [ 179.861274][T18597] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6378'. [ 179.943400][ T3385] hid_parser_main: 57 callbacks suppressed [ 179.943486][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x1 [ 179.957649][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 179.965158][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 179.972615][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 179.980798][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 179.988273][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 180.040814][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 180.048398][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 180.056136][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x2 [ 180.063656][ T3385] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 180.073011][ T3385] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 180.124624][T18632] lo speed is unknown, defaulting to 1000 [ 180.165372][T18632] lo speed is unknown, defaulting to 1000 [ 180.322953][T18653] batman_adv: batadv0: Adding interface: ipvlan2 [ 180.329342][T18653] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.355337][T18653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.365785][T18653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.377261][T18653] batman_adv: batadv0: Interface activated: ipvlan2 [ 180.658890][T18676] lo speed is unknown, defaulting to 1000 [ 180.695616][T18676] lo speed is unknown, defaulting to 1000 [ 180.866103][T18685] tmpfs: Bad value for 'mpol' [ 180.989845][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 180.989860][ T29] audit: type=1400 audit(180.319:7635): avc: denied { listen } for pid=18698 comm="syz.2.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.029351][ T29] audit: type=1326 audit(180.361:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.058378][ T29] audit: type=1326 audit(180.392:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.081462][ T29] audit: type=1326 audit(180.392:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.104348][ T29] audit: type=1326 audit(180.392:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.127310][ T29] audit: type=1326 audit(180.392:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.150196][ T29] audit: type=1326 audit(180.392:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.173122][ T29] audit: type=1326 audit(180.392:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.196073][ T29] audit: type=1326 audit(180.392:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.220214][ T29] audit: type=1326 audit(180.571:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18706 comm="syz.0.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6d44ebe9 code=0x7ffc0000 [ 181.255740][T18712] hub 9-0:1.0: USB hub found [ 181.269838][T18712] hub 9-0:1.0: 8 ports detected [ 181.278592][T18714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6428'. [ 181.288367][T18714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6428'. [ 181.308260][T18717] sd 0:0:1:0: device reset [ 181.386615][T18727] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6432'. [ 181.416719][T18724] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6432'. [ 181.508635][T18740] loop7: detected capacity change from 0 to 256 [ 181.553752][T18746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18746 comm=syz.0.6441 [ 181.696003][T18774] loop7: detected capacity change from 0 to 512 [ 181.697543][T18775] netlink: 'syz.1.6455': attribute type 12 has an invalid length. [ 181.704826][T18774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.734341][T18774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.771881][T18786] loop0: detected capacity change from 0 to 256 [ 181.834167][T18790] wireguard0: entered promiscuous mode [ 181.839658][T18790] wireguard0: entered allmulticast mode [ 182.017799][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.069048][T18804] futex_wake_op: syz.7.6467 tries to shift op by -1; fix this program [ 182.106476][T18814] loop0: detected capacity change from 0 to 736 [ 182.390682][T18835] loop5: detected capacity change from 0 to 256 [ 182.422668][ T68] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.424839][T18837] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.456900][T18845] loop7: detected capacity change from 0 to 512 [ 182.482731][T18845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.505710][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.542020][T18855] wireguard0: entered promiscuous mode [ 182.547682][T18855] wireguard0: entered allmulticast mode [ 182.950401][T18889] loop2: detected capacity change from 0 to 256 [ 182.992720][T18895] loop5: detected capacity change from 0 to 1024 [ 183.004123][T18895] EXT4-fs: Ignoring removed orlov option [ 183.022445][T18895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.076835][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.304370][T18919] loop2: detected capacity change from 0 to 736 [ 183.509560][T18933] netlink: 'syz.2.6522': attribute type 21 has an invalid length. [ 183.527412][T18933] __nla_validate_parse: 9 callbacks suppressed [ 183.527426][T18933] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6522'. [ 183.607469][T18945] loop7: detected capacity change from 0 to 2048 [ 183.615264][T18949] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.617642][T18942] hub 6-0:1.0: USB hub found [ 183.622568][T18949] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 183.642353][T18942] hub 6-0:1.0: 8 ports detected [ 183.851819][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.959650][T18988] loop5: detected capacity change from 0 to 2048 [ 184.170245][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6567'. [ 184.273131][T19026] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 184.323124][T19028] loop5: detected capacity change from 0 to 512 [ 184.343403][T19028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.367410][T19028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.617988][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.716091][T19071] loop5: detected capacity change from 0 to 1024 [ 184.724404][T19071] EXT4-fs: Ignoring removed nobh option [ 184.738670][T19071] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.750381][T19071] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.6580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 184.786550][T19071] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6580: couldn't read orphan inode 11 (err -117) [ 184.805121][T19076] IPv6: Can't replace route, no match found [ 184.823380][T19071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.865685][T19086] loop2: detected capacity change from 0 to 512 [ 184.904920][T19086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 184.915131][T19086] System zones: 1-12 [ 184.919648][T19086] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.6586: corrupted in-inode xattr: e_value size too large [ 184.934145][T19086] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6586: couldn't read orphan inode 15 (err -117) [ 184.946751][T19086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.976718][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.012887][T19107] loop7: detected capacity change from 0 to 512 [ 185.029694][T19107] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.042648][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.054017][T19107] EXT4-fs (loop7): 1 orphan inode deleted [ 185.059797][T19107] EXT4-fs (loop7): 1 truncate cleaned up [ 185.066610][T19107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.098847][T19107] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 185.123276][T19107] EXT4-fs (loop7): Remounting filesystem read-only [ 185.130195][T19107] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 185.192678][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.205951][T19132] netlink: 'syz.2.6607': attribute type 2 has an invalid length. [ 185.213834][T19132] netlink: 'syz.2.6607': attribute type 1 has an invalid length. [ 185.221579][T19132] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.6607'. [ 185.249686][T19135] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6611'. [ 185.265491][T19141] ref_ctr_offset mismatch. inode: 0x17d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 185.302898][T19152] random: crng reseeded on system resumption [ 185.316268][T19152] Restarting kernel threads ... [ 185.323010][T19152] Done restarting kernel threads. [ 185.455662][T19177] lo speed is unknown, defaulting to 1000 [ 185.502185][T19177] lo speed is unknown, defaulting to 1000 [ 185.768125][T19219] loop7: detected capacity change from 0 to 8192 [ 185.984096][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.063532][T19226] geneve2: entered promiscuous mode [ 186.068791][T19226] geneve2: entered allmulticast mode [ 186.100386][T19233] loop7: detected capacity change from 0 to 1024 [ 186.107072][T19233] EXT4-fs: Ignoring removed bh option [ 186.114435][T19233] EXT4-fs: inline encryption not supported [ 186.119715][T19230] lo speed is unknown, defaulting to 1000 [ 186.126206][T19233] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.140169][T19233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 186.155208][T19233] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.6648: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.172792][T19230] lo speed is unknown, defaulting to 1000 [ 186.178962][T19233] __quota_error: 247 callbacks suppressed [ 186.178975][T19233] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 186.193591][T19240] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6649'. [ 186.200558][T19233] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.6648: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.208978][T19235] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6649'. [ 186.219460][T19233] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 186.235398][T19233] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6648: Failed to acquire dquot type 0 [ 186.248559][T19233] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 186.259547][T19233] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.6648: mark_inode_dirty error [ 186.280303][T19233] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.290939][T19233] EXT4-fs (loop7): 1 orphan inode deleted [ 186.297116][T19233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.311918][ T68] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.326369][ T68] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 186.334835][ T68] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 186.348511][ T29] audit: type=1400 audit(185.959:7892): avc: denied { remount } for pid=19232 comm="syz.7.6648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 186.379648][T19233] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.393967][ T29] audit: type=1400 audit(185.980:7893): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.423057][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.462163][ T29] audit: type=1326 audit(186.064:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 186.485167][ T29] audit: type=1326 audit(186.064:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 186.508294][ T29] audit: type=1326 audit(186.064:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 186.518536][T19255] netlink: 'syz.5.6656': attribute type 2 has an invalid length. [ 186.534371][ T29] audit: type=1326 audit(186.075:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 186.539012][T19255] netlink: 'syz.5.6656': attribute type 1 has an invalid length. [ 186.539026][T19255] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.6656'. [ 186.579156][ T29] audit: type=1326 audit(186.075:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 186.622220][T19260] loop2: detected capacity change from 0 to 512 [ 186.650489][T19260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.671433][T19260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.745921][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.834734][T19284] loop2: detected capacity change from 0 to 1024 [ 186.843530][T19284] EXT4-fs: Ignoring removed bh option [ 186.848934][T19284] EXT4-fs: inline encryption not supported [ 186.864083][T19284] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.877019][T19284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 186.886426][T19284] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.6665: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.901083][T19284] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6665: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.923914][T19284] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6665: Failed to acquire dquot type 0 [ 186.951838][T19288] lo speed is unknown, defaulting to 1000 [ 186.955765][T19284] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 186.971873][T19284] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6665: mark_inode_dirty error [ 186.972025][T19284] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.972052][T19284] EXT4-fs (loop2): 1 orphan inode deleted [ 186.972418][T19284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.978136][T15147] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.978782][T15147] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:41: Failed to release dquot type 0 [ 186.980308][T19284] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.981302][T19288] lo speed is unknown, defaulting to 1000 [ 186.995087][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.208851][T19312] sd 0:0:1:0: device reset [ 187.322793][T19323] loop0: detected capacity change from 0 to 512 [ 187.331716][T19323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 187.340545][T19323] System zones: 1-12 [ 187.347196][T19323] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.6683: corrupted in-inode xattr: e_value size too large [ 187.362035][T19323] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6683: couldn't read orphan inode 15 (err -117) [ 187.395297][T19323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.441942][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.665025][T19357] geneve2: entered promiscuous mode [ 187.670323][T19357] geneve2: entered allmulticast mode [ 187.829044][T19376] openvswitch: netlink: Message has 6 unknown bytes. [ 188.065307][T19369] loop0: detected capacity change from 0 to 32768 [ 188.107592][T19369] loop0: p1 p3 < > [ 188.363951][T19417] ref_ctr_offset mismatch. inode: 0x1bc1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 188.453941][T19422] loop7: detected capacity change from 0 to 1024 [ 188.464068][T19422] EXT4-fs: Ignoring removed nobh option [ 188.481268][T19422] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.503920][T19422] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.6727: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 188.545426][T19422] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6727: couldn't read orphan inode 11 (err -117) [ 188.561476][T19422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.604700][T19440] loop0: detected capacity change from 0 to 128 [ 188.622981][T19440] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.707323][T19440] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.721715][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.796862][T19455] batman_adv: batadv0: Adding interface: ipvlan2 [ 188.804086][T19455] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 188.823792][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.823875][T19427] loop5: detected capacity change from 0 to 32768 [ 188.835051][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.853201][T19455] batman_adv: batadv0: Interface activated: ipvlan2 [ 188.905562][T19466] loop7: detected capacity change from 0 to 512 [ 188.907454][T19427] loop5: p1 p3 < > [ 188.918935][T19466] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 188.930675][T19466] EXT4-fs (loop7): 1 truncate cleaned up [ 188.946200][T19466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.989660][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.081839][T19482] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.096704][T19482] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 189.119731][T19484] loop5: detected capacity change from 0 to 128 [ 189.127344][T19484] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.140538][T19484] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.296256][T19496] batman_adv: batadv0: Adding interface: ipvlan2 [ 189.302671][T19496] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.328663][T19496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.339182][T19496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.349213][T19496] batman_adv: batadv0: Interface activated: ipvlan2 [ 189.899582][T19528] loop2: detected capacity change from 0 to 2048 [ 189.920356][T19528] loop2: p1 < > p4 [ 189.935265][T19528] loop2: p4 size 8388608 extends beyond EOD, truncated [ 190.004902][T19551] geneve2: entered promiscuous mode [ 190.010177][T19551] geneve2: entered allmulticast mode [ 190.016232][T19554] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6786'. [ 190.021581][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6784'. [ 190.055976][T19560] netlink: 'syz.5.6787': attribute type 1 has an invalid length. [ 190.071398][T19560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.082118][T19564] bridge0: port 5(batadv2) entered blocking state [ 190.088678][T19564] bridge0: port 5(batadv2) entered disabled state [ 190.095386][T19564] batadv2: entered allmulticast mode [ 190.101380][T19564] batadv2: entered promiscuous mode [ 190.113226][T19560] bond1: (slave geneve2): making interface the new active one [ 190.122842][T19560] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 190.131371][T19566] loop2: detected capacity change from 0 to 1024 [ 190.140946][T19566] EXT4-fs: Ignoring removed nobh option [ 190.147936][T19566] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.165100][T19566] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.6790: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 190.194931][T19569] loop5: detected capacity change from 0 to 512 [ 190.197226][T19571] loop7: detected capacity change from 0 to 512 [ 190.201733][T19566] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6790: couldn't read orphan inode 11 (err -117) [ 190.209759][T19571] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.220527][T19566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.245749][T19569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.270893][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.314219][T19576] loop7: detected capacity change from 0 to 2048 [ 190.333683][T19578] loop5: detected capacity change from 0 to 1024 [ 190.346827][T19578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.359378][T19576] loop7: p1 < > p4 [ 190.363682][T19576] loop7: p4 size 8388608 extends beyond EOD, truncated [ 190.385193][ T3450] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 190.400735][ T3450] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 190.413189][ T3450] EXT4-fs (loop5): This should not happen!! Data will be lost [ 190.413189][ T3450] [ 190.422957][ T3450] EXT4-fs (loop5): Total free blocks count 0 [ 190.429076][ T3450] EXT4-fs (loop5): Free/Dirty block details [ 190.435055][ T3450] EXT4-fs (loop5): free_blocks=4293918720 [ 190.439788][T19582] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6798'. [ 190.440901][ T3450] EXT4-fs (loop5): dirty_blocks=16 [ 190.440916][ T3450] EXT4-fs (loop5): Block reservation details [ 190.440928][ T3450] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 190.444099][T11115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.477696][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.520510][T19591] bridge0: port 4(batadv1) entered blocking state [ 190.527156][T19591] bridge0: port 4(batadv1) entered disabled state [ 190.535002][T19591] batadv1: entered allmulticast mode [ 190.541021][T19591] batadv1: entered promiscuous mode [ 190.564034][ T68] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 190.573320][ T68] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 190.651658][T19612] loop7: detected capacity change from 0 to 1024 [ 190.658370][T19612] EXT4-fs: Ignoring removed nobh option [ 190.664472][T19612] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.677542][T19612] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.6810: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 190.697234][T19612] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6810: couldn't read orphan inode 11 (err -117) [ 190.709848][T19612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.827396][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 190.892574][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'. [ 190.933763][T18234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.001668][ T68] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.011665][ T68] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.123289][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 191.123305][ T29] audit: type=1326 audit(190.969:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.153152][ T29] audit: type=1326 audit(190.969:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.178402][T19661] bridge0: port 6(batadv3) entered blocking state [ 191.184959][T19661] bridge0: port 6(batadv3) entered disabled state [ 191.191847][T19661] batadv3: entered allmulticast mode [ 191.197754][T19661] batadv3: entered promiscuous mode [ 191.207007][ T29] audit: type=1326 audit(190.969:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.229914][ T29] audit: type=1326 audit(190.969:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.253548][ T29] audit: type=1326 audit(190.969:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.276510][ T29] audit: type=1326 audit(190.969:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.300100][ T29] audit: type=1326 audit(190.969:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.323052][ T29] audit: type=1326 audit(190.969:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.346517][ T29] audit: type=1326 audit(190.969:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.369564][ T29] audit: type=1326 audit(191.001:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.1.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada444ebe9 code=0x7ffc0000 [ 191.432531][T19667] bridge0: port 4(batadv2) entered blocking state [ 191.439030][T19667] bridge0: port 4(batadv2) entered disabled state [ 191.446399][T19667] batadv2: entered allmulticast mode [ 191.455788][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6836'. [ 191.465212][T19667] batadv2: entered promiscuous mode [ 191.527408][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6846'. [ 191.560300][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6856'. [ 191.611796][T15125] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 191.621152][T15125] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 191.713620][T19717] bridge0: port 5(batadv2) entered blocking state [ 191.720319][T19717] bridge0: port 5(batadv2) entered disabled state [ 191.729427][T19717] batadv2: entered allmulticast mode [ 191.743269][T19717] batadv2: entered promiscuous mode [ 191.814764][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6861'. [ 191.861753][T19734] program syz.1.6865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.872821][T19734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 191.908765][ T3450] batman_adv: batadv2: IGMP Querier appeared [ 191.914844][ T3450] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 192.192564][T15147] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 192.201898][T15147] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 192.229943][T19792] netlink: 'syz.1.6892': attribute type 1 has an invalid length. [ 192.248288][T19792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.276343][T19792] bond1: (slave geneve2): making interface the new active one [ 192.285612][T19792] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 192.898441][T19802] sctp: [Deprecated]: syz.1.6896 (pid 19802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.898441][T19802] Use struct sctp_sack_info instead [ 192.985851][T19816] netlink: 'syz.1.6906': attribute type 1 has an invalid length. [ 192.993701][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.044450][T19832] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 193.126667][T19842] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6919'. [ 193.202872][T19855] netlink: 'syz.0.6926': attribute type 3 has an invalid length. [ 193.686479][T10694] hid_parser_main: 26 callbacks suppressed [ 193.686498][T10694] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 193.699845][T10694] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 193.707374][T10694] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 193.717257][T10694] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 193.835609][T19956] wireguard0: entered promiscuous mode [ 193.841146][T19956] wireguard0: entered allmulticast mode [ 193.986734][T19965] lo speed is unknown, defaulting to 1000 [ 194.014274][T19965] lo speed is unknown, defaulting to 1000 [ 194.079562][T10694] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 194.087309][T10694] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 194.094700][T10694] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 194.117968][T10694] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 194.566062][T20029] netlink: 'syz.7.7001': attribute type 18 has an invalid length. [ 194.579088][T20029] vxlan0: entered promiscuous mode [ 194.585932][T15147] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.597806][T15147] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.606899][T15147] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.618555][T15147] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.817674][T20058] vhci_hcd: invalid port number 96 [ 194.823022][T20058] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 195.065311][T20108] netlink: 'syz.1.7041': attribute type 10 has an invalid length. [ 195.081541][T20110] netlink: 'syz.2.7042': attribute type 3 has an invalid length. [ 195.092241][T20106] vhci_hcd: invalid port number 96 [ 195.097509][T20106] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 195.156097][T20121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20121 comm=syz.0.7046 [ 195.248871][ T3385] hid-generic 0401:0002:0007.0010: unknown main item tag 0x0 [ 195.256290][ T3385] hid-generic 0401:0002:0007.0010: unknown main item tag 0x0 [ 195.264407][ T3385] hid-generic 0401:0002:0007.0010: unknown main item tag 0x0 [ 195.271921][ T3385] hid-generic 0401:0002:0007.0010: unknown main item tag 0x0 [ 195.287178][ T3385] hid-generic 0401:0002:0007.0010: hidraw0: HID vffffff.f6 Device [syz1] on syz1 [ 195.478552][T20153] __nla_validate_parse: 2 callbacks suppressed [ 195.478568][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7063'. [ 195.504149][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'. [ 195.605975][T20172] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7072'. [ 195.627862][T20172] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7072'. [ 195.684539][T20188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7079'. [ 195.759234][T20204] netlink: 'syz.7.7087': attribute type 1 has an invalid length. [ 195.828088][T20211] lo speed is unknown, defaulting to 1000 [ 195.842235][T20220] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 195.898141][T20211] lo speed is unknown, defaulting to 1000 [ 195.910614][T20232] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7100'. [ 195.945310][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 195.945323][ T29] audit: type=1400 audit(196.031:8162): avc: denied { mounton } for pid=20233 comm="syz.5.7101" path="/761/file0" dev="tmpfs" ino=3934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 195.964760][T20228] lo speed is unknown, defaulting to 1000 [ 195.986208][ T29] audit: type=1400 audit(196.073:8163): avc: denied { ioctl } for pid=20235 comm="syz.2.7102" path="socket:[59379]" dev="sockfs" ino=59379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.034181][ T29] audit: type=1400 audit(196.126:8164): avc: denied { setopt } for pid=20239 comm="syz.7.7103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.068948][T20228] lo speed is unknown, defaulting to 1000 [ 196.109629][ T29] audit: type=1400 audit(196.157:8165): avc: denied { associate } for pid=20241 comm="syz.2.7104" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 196.136105][ T29] audit: type=1400 audit(196.189:8166): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 196.178454][ T29] audit: type=1326 audit(196.273:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20247 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 196.215382][ T29] audit: type=1326 audit(196.305:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20247 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 196.239032][ T29] audit: type=1326 audit(196.305:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20247 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 196.262064][ T29] audit: type=1326 audit(196.305:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20247 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 196.285706][T20252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7106'. [ 196.326099][T20264] wireguard0: entered promiscuous mode [ 196.331625][T20264] wireguard0: entered allmulticast mode [ 196.372646][ T29] audit: type=1326 audit(196.473:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff061d6ebe9 code=0x7ffc0000 [ 196.445276][T20277] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.541902][T20289] serio: Serial port ptm0 [ 196.715460][T20323] serio: Serial port ptm1 [ 196.850085][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 196.859004][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7155'. [ 197.001587][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7163'. [ 197.039010][T20377] team0 (unregistering): Port device team_slave_0 removed [ 197.061100][T20377] team0 (unregistering): Port device team_slave_1 removed [ 197.094547][T20388] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 197.165797][T20399] openvswitch: netlink: Message has 6 unknown bytes. [ 197.543644][T20434] ================================================================== [ 197.551749][T20434] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 197.560341][T20434] [ 197.562651][T20434] write to 0xffff8881049322e8 of 8 bytes by task 20431 on cpu 1: [ 197.570350][T20434] shmem_file_splice_read+0x470/0x600 [ 197.575720][T20434] splice_direct_to_actor+0x26f/0x680 [ 197.581077][T20434] do_splice_direct+0xda/0x150 [ 197.585836][T20434] do_sendfile+0x380/0x650 [ 197.590248][T20434] __x64_sys_sendfile64+0x105/0x150 [ 197.595446][T20434] x64_sys_call+0x2bb0/0x2ff0 [ 197.600122][T20434] do_syscall_64+0xd2/0x200 [ 197.604632][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.610533][T20434] [ 197.612945][T20434] write to 0xffff8881049322e8 of 8 bytes by task 20434 on cpu 0: [ 197.620655][T20434] shmem_file_splice_read+0x470/0x600 [ 197.626025][T20434] splice_direct_to_actor+0x26f/0x680 [ 197.631389][T20434] do_splice_direct+0xda/0x150 [ 197.636152][T20434] do_sendfile+0x380/0x650 [ 197.640566][T20434] __x64_sys_sendfile64+0x105/0x150 [ 197.645764][T20434] x64_sys_call+0x2bb0/0x2ff0 [ 197.650432][T20434] do_syscall_64+0xd2/0x200 [ 197.654943][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.660823][T20434] [ 197.663129][T20434] value changed: 0x000000000000545c -> 0x0000000000005464 [ 197.670228][T20434] [ 197.672531][T20434] Reported by Kernel Concurrency Sanitizer on: [ 197.678668][T20434] CPU: 0 UID: 0 PID: 20434 Comm: syz.1.7190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.688461][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.698512][T20434] ================================================================== [ 199.694911][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!