last executing test programs: 3.326166986s ago: executing program 2 (id=563): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 3.273984547s ago: executing program 2 (id=565): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 3.215674388s ago: executing program 2 (id=566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x63008000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0xf0ff1f00000000) 3.006552231s ago: executing program 2 (id=569): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x2c, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x3, 0x20b, 0x0, r1}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) accept(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(r2, 0x40f9, 0x217, 0x85, 0x0, 0x0) close_range(r0, r1, 0x0) 2.887319273s ago: executing program 2 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 2.372848192s ago: executing program 3 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}}, 0x4000000) 2.152803695s ago: executing program 3 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) 2.096383476s ago: executing program 3 (id=582): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x3f1, 0x148, 0xd0, 0x5, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0xd0, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0xf, 0x6, 0x2, 0x1, 0x2]}}}}, {{@ip={@local, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) close_range(r2, r1, 0x2) ustat(0x9, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.030779557s ago: executing program 3 (id=583): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/191, 0xbf, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0x1140000000f336, 0x9) close(r1) 1.989277878s ago: executing program 2 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x13) 1.21236611s ago: executing program 3 (id=584): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.054834793s ago: executing program 4 (id=591): socket$key(0xf, 0x3, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) 796.551167ms ago: executing program 4 (id=598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ffffffd000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 668.918149ms ago: executing program 4 (id=602): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x1, &(0x7f0000000080)={0xd62, 0x240000000008a}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x4001, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 654.19152ms ago: executing program 4 (id=603): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) 635.76006ms ago: executing program 1 (id=604): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0x2, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) 614.60052ms ago: executing program 1 (id=605): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)={0xffffffff, 0x8000000003ff, 0x4, 0x100, 0x1, 0x0, [{0x6, 0xf, 0x9, '\x00', 0x400}]}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)="4ae0b640", 0x4, 0xffffffffffffffff) 552.457771ms ago: executing program 4 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5100f35d}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) close(r2) 533.858281ms ago: executing program 4 (id=607): r0 = inotify_init1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007100000000a00900"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) 529.975402ms ago: executing program 1 (id=608): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 491.093662ms ago: executing program 1 (id=609): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000690000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0xfffff6f7, 0x0, 0x0, 0xe486, 0x0, 0x0, 0x3, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 381.254134ms ago: executing program 1 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) write$UHID_INPUT(r0, &(0x7f0000000cc0)={0x8, {"149e3c109992a9fcef1508979a736b0e089f456a99d2bd0346681dca63783b9472a67247f9c9860456aadd51a65b4cef6068a5ecfe9f11ffb8753e2d266fbd0b10bc4f882fcae0a2e904d46c51568164b78b3300538f08423d65c0c7c38225a6b1b45b39c351ae9eec03aba6e680851731e3d86c71508bf00f08b1994e64df52deb837b39a6b456a5f537dc3014f466f2d450c4e1cbb6c794c4f8d1b452cb0cc6e65a5a9b0c771c010e46f4b1fb53929a5cd0787621dc47931a4d9d9909378ca349632aa8ef22f665560317de58e95779a49e64ec10c01b684a6a63e4a252a7711637790e47a6a066c5aed4a97e8c711f00fd0f325f8a16ef40ee50528cf3cdc086667df6fd6035acc18bf4a834bfd316dd8a79f7eab838fab7df5bf1b6b15d448ca832270e0c4071c28e49da81ee7d95139cf06d7bbb125d29e6da5cc5e86cf75bd8138534ee9bd857a8e108ca7a4e1471e36deef607009abaf5047b4a4f19d00f63cb9b53e1fb72cab320af0d7276a516ec4c62fb76236db6a6c37834e4cd5f513303f424955f973d216f41543263783369bf6fdfa67692924954397992dc005a777199b60e5b7540eebf4a5ac24eeb2b5b6aef573637a380c13a93dac0fd29ccced0b84b52d31c497edc2f47286a5330bc56aa24717d8bea964e046ef1056b7d8b5e0a0409254a6a67b0b5a882a93e3e5f0a988369cbd1ecf7c86b45b9ea0afadae6c35b89ffc2fc92e98105df4a513ff3eecca4383fb7419dbbc72b1b2cb976e15ea33d7678bd4bb72182055cf3937ac90b8b0413a7261821e66e58ad747f7c68f9e69c603de6ac13588112dffdb59988485c0b3c03c626c78d6ec1f1bb97f842fd070995c601fb446eabb20b3fa3d4660d68c7241651f497696832c6b9910c3b6bd90b5bcb8e0b8bb1292cf3ead3d9a002ede53480e6eb1ff3c63d24e37f4d2bfcac0dd9c506dfd90e79a18fde54c39a7cba9a3a2221d15d6ae77cb53d5a30dee7affa311507de4b3fa2ac3c340b574385e5c10a63c3975303b27d4c5645d6bbf60d5e7b1772b3c6d652f8d5e3e9bc326d29c0cb9dea433c1c0380b5599f9898fa170faf6aca18e1b9c3bed85436db7341089f931d0a108a2bf2c8828283b46aaccdffaaad95ba596c14b08284c147ebdd7f7358deb317bfabd3e4bcce19caf3d75331b48a6cc4ecdb54fad9bc857c7b9b5960b34f7ec4fc65e574e0a0741c078f45bc40e8c5521b6fc21ea5088912623ad7bf42808dd14736255d0f5fbc4c069d0b7517a5e8e04e71fb46a05bcd3e0ca8d7941db8e574e5e8871189fb36bbed3537dc710cd89fdc28be408b396552ab0af2b31e748ffbd44458b8cb6fedb89f35d09c85acfce501fc6869e35a44467d41d3162d9edbaea1b37497698b853e6b37aa7b20a1a0e4f69457e4e0c489bf961bc5a3d50da9bc17f04ff5d4e63e513ddc23282c40eed8f28676d5cf9084eaf378414d3742fb9b53858484ac0210f5ac3b9c5b72af5688eca9731b22e5b3401b04c14f7d26882c085ddb05c5edf25ca5f5d1789893491ad87544569dfb0c78d58c5abcfd8677549d58111ed4d4a760533ef6e360863c01be7d7bb4bf41d077fad4237dfc082a531de29add4b5e8f7a7115785e27ffdc4502c93b7250a2da854781912f1c4dbe0ac6acca98cb2fc83637e33547c2045508dd670b570f4f84cef4394073d04733a02d3afaaffc1321a85fa2148889106fc46a8ff653e86f4443b607fd04b2e7a1945e6a3f3f1384567fa2464d3ee1bbaa575fdad068724d553531592cdf0c079cc0d8ccd18cd85001b5ac42299f78dbed82ba81a1dfc429b9c8ddf8666d5a4e123c33e9f32c0329c153c2a37282623f1136cb0621c0c8b769547b91fc96cf3646b99c9f26bf6178cc6f3618634c56efea4f026b56a0f9afaa34c9cfc69d1682d67536dbf5f9a02d83a572ec9bfa27c7af590e6106f9631bb02ab15bde9a007a96c63da1360e4742f63b24c8d3de2b81c283cf22931d620ca66b47e088c12ceb178be0e6adf8407a6dce5c9ab355b97912aad62ba79445509c43d18153f89740c9517eb2ebfc07835b8c4e39f5815ca5a95f0fef499fb8853583e32761570906f1a70a8fed05a394ab4ad0c17d04aa9bc7e00649b0df9ae0b2631889ea6ae7d720904fe6ec6a63b8f9326a7925addbd49768e9971d6cb63db2bcc09ef53813f8d7c1c7033a6d4fa1d248febe94fc1a47332438ac43e67647604ea5a5b990213dedb2fa4f9d9b4c5df5c49c161d1d48602b3d5de4740773fb38527afbcc385a00abf24f42512b973800d810ecf7e2edf55bd90bada1c59a3508871db439d33d2362f2de92f5b30b84016c564db7514956f3836fa0cc68e3fa93114ff6084104b3bdcad19a3858fb64694c611959215465f5eff1353d3be34ce3334aa757b0ec20ddbff2f74a7c78fcb0ff82c864c47ed35287deea77ab3de80b566071b7e19986f8b7319acc84ee37ffa6995b859946d54c047035f24da87e19f2dc71f0895268a69e9cd0d27c0f6316fa565dc1bc6f4cd00df75b3dfba9e877ed6baafd05e50f84b4a3d447198fd7e6026ed5277e5873cd3241cd6722cc83f59840fbb347d3bbeb818e77eb577adcc71294f2d4ab4bcb954d8ddab80fd89183372dc8f51914d521040a3f714c5785b0d494a49b351437835683e112255540f0eed0775a423100318fb2fed9b4ef6b98db2a90469c125e6a3df90053ce6a64e88cfe52e476978010801286603de1a059d929b3326f30ef02b036384b220895a9230c27b66fa43aeb3ccbf73eed6976e2561fe6a17f888b89ec1109f0bd882917724b6162653f1599803914e8beee3413202f344fe3735c0ac7d9d4b82e9184a34797222ca2745e613ceb2e2e42b8164c769d8fc7aa0265138cba346527dc9ba6e87baa4668fd38ae5ec0d347457f0574c627513c59ab9e5e84a3ed740f9ec56bd939c03c20855a2ac7c23ed31ac767cec669ce006de3ababe1db3f4776483d3fdf9c7f5dcc727c5be5247a351bc8c1c3fda04366c0fdbc3e0aab17ac278a1a42717399dcaf2debf95a69ce5e51d73799ff9d6573649964247a3c06e5400c5faa3e80e42067d9f011547d969b901c603984a31b602cd6b2bd7e74968de4291a02d4c4f5eb8c6fdce152029763e25a097dba10040a9464f003e6ea6dbcc91261fe001a59c9eea2eb8e587f16bcfc3199957dcff2b2abcc22990930f58dccb981456316378544973116ec52123da3830ac10450e04381187a4e5262285a118fab49972de540b3dad015168404b0ee149d8b29b0e06ec53c4fc07d39488e852d8a6bd537df42c5d0a445902f607252379e7c0534bf697305d15e9b0dc47c7b88e16a9b485a4752d69a3a38c2adbb56d95f27862d6e2bbd19527a53306265eef430bf3fa89d595bd07270d1eee2213c0f701ca1569b083522fb2e4b27c0e11ad5cccfeafb50bd472074f5a2f2175e501cc3624f21658f7c337f3d9f2f25a66431af97574d982484f1f7b6c7bde5e2e569e9fea779602b0fb3e333654314bcb9235ae84e316a463b94a68fc6e5b422ac34bb4d289050e5dc3d0d198758d2d527511a1693c0b4794a2becb2ab8f91336f7d035a7f164896b633a9e15d14ad4436492c2ddd2c175ff7bc03a70a499115b3887201697dcf64c93f54cc361074b249173c0fd69b2355addad5cff98211f76cc940aa9b1977c2c611db6c2f64d79f13e6dad603375161ddd1670e49b93c073491d557f82b100459b7ea26f47d27d587e28047933073c728f5c7a13b3687a7d4f478f6d690e4e704ea3f0724cf52e1cff17b49467182cb8d8f4db2f079fadba882a49329a8fbcea0f2cc66c0e2498d968d5c930ebe8f3201f88f54620964316f36059d37aaa4692241300251df5a1d7cffac5b6231561f58fbbd3d9d33917693e0cd5a85a3a4deefafc920cbcddb042efbeee9ce0cc0c8cfdc4e51871df472f1878a9ec9af30e14ffce95b37421d756c898fe82f6501d5069314fbe3e4788fae4fb6e64de126abb4f7cffa8178066a382576822bb337ae07b4bdad4b4cdd60f3d2acb9cfd94dcf11c063df00ff0feeb0fe0eb3c0c29ecc69f738b7ce31928b222ea7df36e38ad27a581fc96072134d96dfdb6c75dd6bc3df39dd00ab093e15ea157dba08839f390368b634da83b51cc56f505e2eb5e3aac7a92fcf268541b5295e6d707e05db05c16eedd8c0b4f6766499ed4fdb83f05e953b3d05297e9d9066f5a4d2c06cea4c4b5472e294c47f43359ff54545d4f3f04994b211f143f0861ced1c5da20d498b32442a08555e14ac5c50b0a845d660fbff64a57c12d32c2b20e26e2e1b239c4cfc3f19ed80bcb458b4911ee1ec51d3b5e347b3a1091d2502ef467827518f901188e9c68a3f08a131b2f9380517a82762405b8786e0459aa29ee372af128ca913eb04de45061e2204b20df9307a844287fb0e831f6e92227f6bb4488dda196944f003d895dc7b75d8c45e4c850b4e33728e8dff1a130187d6c608e134da4542350323f603211fbb773d261554452bd94d13d938afc6fc7b21d61609fb67a678a9cc93154f240e24659c043460a7cf67b8d7386d3791fccc2b0839e1d56afb984a168f52218251442572f73d48033424133202f5be291c6c5447ae96cbe62acbf8ea78abd6d15435b087882662cf34c8d71a70071a825039cd2ef0f3ea51419501eebbdb665e5c60b2b87d756cec9a659e358b837bf6e4ee139eba3e568c80caf5f7134a1580632aa2029ba1ea68b7aee90d462753bdd07f35127053cda8bc771712198c4344bb49b9ae7dcd40abe34568e039666552fa91139c4cacb2efbb659284e459ba618c079ef8fbac67f2dbee6fd8150fcc8a54fb14188b349a6621f9f86a5e788092197bc00c4c8b0cf811f349f9b0d1314ffe80af49e9efe52d82fafb0d77b839aed6eb3c1fd4c9dacdf672e291055ae380c699468443e36b543291e200f701dda9a54a530ad39667b2d6bf6783e3800d3ab0773e3af0a135cba27d277be847d031de3931b3a7fcc581c9d583a20a47c26c23096f1ee50894689a3a9a360858c7cf78c6ae571c30df6e51903a3d1bb0f4e4fbecd7b85d4045c9c6d6a0e2a86e2830663813b3840f743b8081049ab9253b6970e9478f2ee943e7a242d13d274e8cb1d27ccb95d32899a419b8767bb7859f1660e66aac0cabe87448303197fa16e712175345b4bb2e9914b36148da489562d7968ef6d571130df782fd67599eaf4ed52b86ae1d50804c429d943a53e1d568d62cbc1aa37efbad899125ee5ec805e75f71f342bd432a5a69701ae5f9909716dbd15656e0686293e4273b62e6799b275f069f6d94d0d8eea997a52060001114df218c106bec1870bd051bb29b79e6a12ce637a4645044f661a4ef8100b4981edcbd000f47cd93547c0a639226c7596bd09098a5634355b063d05311d2933ffac48ba3ced848e1abcb06aba6b99f4d435629116fcef5a55379fdea08b3e8669744acba8fc25a5fe59f07896b8d3690068f9f3170dfa581a888b0795d514431c0dcfb9fabcc99bd79eb491b9722472dd3eb87239ee821798872d9d665bd2b761ddc003af20fe301bb19dfa9685c245e15d602389182775b7bb5967bfaad80f25d1f5460a92e611e3908b9b4a643d0252a141fe66a9870cf9790cf0a1617c52d58e1e0858f8f69f60a15cf02afda535af892d3605f428cd0557fc2971387f646157c5a1ab7e8d96b4f1093801f7ee880a33e5ae1885cf6e91092a04f05737cbb36afad95719e44457", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x3, 0x2, 0x2, 0x8, 0xffffffffffffffff, 0x4}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x7fffffff, 0xc91a}, 0x10, 0x0, r1, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x4, @void, @value}, 0x94) 380.886584ms ago: executing program 1 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r3, r2, 0x0, 0x7ffff000) 348.644544ms ago: executing program 3 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 257.583946ms ago: executing program 0 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0x20000000}}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 221.523227ms ago: executing program 0 (id=616): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2, @ANYRESDEC=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 161.164107ms ago: executing program 0 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf250100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/33, 0x21}, 0xffffffc6}], 0x1, 0x45833af92e4b39fd, 0x0) 108.596368ms ago: executing program 0 (id=618): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xac, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) close(0xffffffffffffffff) gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 72.803289ms ago: executing program 0 (id=619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup3(r1, r0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3e81, 0x0, 0xfffffffd, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)="74a930f7"}) 0s ago: executing program 0 (id=620): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r0, 0x12) kernel console output (not intermixed with test programs): dv: batadv0: Adding interface: batadv_slave_0 [ 27.930175][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.956175][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.978670][ T3318] team0: Port device team_slave_0 added [ 27.984675][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.991695][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.017600][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.028749][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.035765][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.061674][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.072694][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.079705][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.105626][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.121266][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.128378][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.135478][ T3316] bridge_slave_0: entered allmulticast mode [ 28.141725][ T3316] bridge_slave_0: entered promiscuous mode [ 28.148798][ T3318] team0: Port device team_slave_1 added [ 28.154596][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.161643][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.168804][ T3316] bridge_slave_1: entered allmulticast mode [ 28.175151][ T3316] bridge_slave_1: entered promiscuous mode [ 28.212503][ T3307] hsr_slave_0: entered promiscuous mode [ 28.218652][ T3307] hsr_slave_1: entered promiscuous mode [ 28.229582][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.236570][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.262554][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.274262][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.284341][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.314878][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.321825][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.347815][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.369260][ T3306] hsr_slave_0: entered promiscuous mode [ 28.375615][ T3306] hsr_slave_1: entered promiscuous mode [ 28.381530][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.389103][ T3306] Cannot create hsr debugfs directory [ 28.419139][ T3310] hsr_slave_0: entered promiscuous mode [ 28.425214][ T3310] hsr_slave_1: entered promiscuous mode [ 28.430923][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.438534][ T3310] Cannot create hsr debugfs directory [ 28.449130][ T3316] team0: Port device team_slave_0 added [ 28.457909][ T3316] team0: Port device team_slave_1 added [ 28.495181][ T3318] hsr_slave_0: entered promiscuous mode [ 28.501181][ T3318] hsr_slave_1: entered promiscuous mode [ 28.506998][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.514558][ T3318] Cannot create hsr debugfs directory [ 28.529423][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.536444][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.562454][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.592184][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.599161][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.625269][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.692505][ T3316] hsr_slave_0: entered promiscuous mode [ 28.698686][ T3316] hsr_slave_1: entered promiscuous mode [ 28.704428][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.712128][ T3316] Cannot create hsr debugfs directory [ 28.796809][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.805676][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.819397][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.827990][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.860288][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.878208][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.895322][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.903969][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.917585][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.930237][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.938877][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.947506][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.979384][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.988467][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.996991][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.018035][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.034915][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.055735][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.065812][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.072862][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.081734][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.088870][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.109392][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.121009][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.129884][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.142950][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.157012][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.175135][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.188750][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.195894][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.207122][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.214211][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.275574][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.294349][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.314271][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.325553][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.339758][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.356755][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.363862][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.373007][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.380084][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.400000][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.412962][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.423406][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.440190][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.465773][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.472856][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.481736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.488834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.513358][ T3307] veth0_vlan: entered promiscuous mode [ 29.521684][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.532026][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.542514][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.561676][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.568864][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.585789][ T3307] veth1_vlan: entered promiscuous mode [ 29.595943][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.610137][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.617216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.645728][ T3307] veth0_macvtap: entered promiscuous mode [ 29.653368][ T3307] veth1_macvtap: entered promiscuous mode [ 29.660466][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.681838][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.692779][ T3306] veth0_vlan: entered promiscuous mode [ 29.701053][ T3306] veth1_vlan: entered promiscuous mode [ 29.721516][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.749248][ T3306] veth0_macvtap: entered promiscuous mode [ 29.755964][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.764793][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.773605][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.782382][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.800091][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.808680][ T3306] veth1_macvtap: entered promiscuous mode [ 29.821410][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.834745][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.848939][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.869429][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.878380][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.887199][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.895991][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.906704][ T3310] veth0_vlan: entered promiscuous mode [ 29.927408][ T3310] veth1_vlan: entered promiscuous mode [ 29.952779][ T3310] veth0_macvtap: entered promiscuous mode [ 29.960267][ T3310] veth1_macvtap: entered promiscuous mode [ 29.983119][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.993648][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.014645][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.022719][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.031544][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.040367][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.049185][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.138483][ T3316] veth0_vlan: entered promiscuous mode [ 30.187742][ T3316] veth1_vlan: entered promiscuous mode [ 30.263696][ T3316] veth0_macvtap: entered promiscuous mode [ 30.287379][ T3316] veth1_macvtap: entered promiscuous mode [ 30.330191][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.361610][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.436555][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.445463][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.454218][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.463026][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.562040][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 30.562055][ T29] audit: type=1400 audit(1749971770.150:101): avc: denied { allowed } for pid=3486 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.601748][ T3487] loop0: detected capacity change from 0 to 128 [ 30.643984][ T29] audit: type=1400 audit(1749971770.230:102): avc: denied { mount } for pid=3486 comm="syz.0.6" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.685243][ T3318] veth0_vlan: entered promiscuous mode [ 30.713484][ T3318] veth1_vlan: entered promiscuous mode [ 30.767919][ T29] audit: type=1400 audit(1749971770.350:103): avc: denied { read } for pid=3490 comm="syz.3.4" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.769501][ T3318] veth0_macvtap: entered promiscuous mode [ 30.790368][ T29] audit: type=1400 audit(1749971770.350:104): avc: denied { open } for pid=3490 comm="syz.3.4" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.837387][ T3318] veth1_macvtap: entered promiscuous mode [ 30.841698][ C1] hrtimer: interrupt took 35556 ns [ 30.851338][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.858714][ T29] audit: type=1400 audit(1749971770.380:105): avc: denied { open } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.877697][ T29] audit: type=1400 audit(1749971770.380:106): avc: denied { kernel } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.896979][ T29] audit: type=1400 audit(1749971770.410:107): avc: denied { ioctl } for pid=3490 comm="syz.3.4" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.904908][ T3487] syz.0.6: attempt to access beyond end of device [ 30.904908][ T3487] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 30.938010][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.948126][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.957002][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.965793][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.974624][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.990019][ T3487] syz.0.6: attempt to access beyond end of device [ 30.990019][ T3487] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 31.054924][ T3487] syz.0.6: attempt to access beyond end of device [ 31.054924][ T3487] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 31.080193][ T29] audit: type=1400 audit(1749971770.660:108): avc: denied { create } for pid=3495 comm="syz.1.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.101266][ T29] audit: type=1400 audit(1749971770.660:109): avc: denied { map } for pid=3495 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.125154][ T29] audit: type=1400 audit(1749971770.660:110): avc: denied { read write } for pid=3495 comm="syz.1.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.134729][ T3487] syz.0.6: attempt to access beyond end of device [ 31.134729][ T3487] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 31.179780][ T3498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.195753][ T3487] syz.0.6: attempt to access beyond end of device [ 31.195753][ T3487] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 31.224201][ T3500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.234829][ T3487] syz.0.6: attempt to access beyond end of device [ 31.234829][ T3487] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 31.249163][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.264846][ T3487] syz.0.6: attempt to access beyond end of device [ 31.264846][ T3487] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 31.299435][ T3487] syz.0.6: attempt to access beyond end of device [ 31.299435][ T3487] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 31.333766][ T3493] sch_fq: defrate 0 ignored. [ 31.364804][ T3487] syz.0.6: attempt to access beyond end of device [ 31.364804][ T3487] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 31.388655][ T3509] pim6reg: entered allmulticast mode [ 31.412066][ T3487] syz.0.6: attempt to access beyond end of device [ 31.412066][ T3487] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 31.425545][ T3509] pim6reg: left allmulticast mode [ 31.514050][ T3515] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 31.539658][ T3515] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 31.551462][ T3517] IPv6: sit1: Disabled Multicast RS [ 31.591512][ T3524] netlink: 'syz.2.19': attribute type 4 has an invalid length. [ 31.606706][ T3524] netlink: 'syz.2.19': attribute type 4 has an invalid length. [ 31.816149][ T3540] syzkaller0: entered promiscuous mode [ 31.821646][ T3540] syzkaller0: entered allmulticast mode [ 31.861875][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.871843][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.940745][ T3547] fido_id[3547]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.005874][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 32.029624][ T3557] syzkaller0: entered promiscuous mode [ 32.035178][ T3557] syzkaller0: entered allmulticast mode [ 32.130998][ T3564] tipc: Started in network mode [ 32.135966][ T3564] tipc: Node identity ac14140f, cluster identity 4711 [ 32.143064][ T3564] tipc: New replicast peer: 255.255.255.255 [ 32.149272][ T3564] tipc: Enabled bearer , priority 10 [ 32.174255][ T3566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 32.246079][ T3568] openvswitch: netlink: Message has 6 unknown bytes. [ 32.261600][ T3566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.286471][ T3570] tipc: Started in network mode [ 32.291374][ T3570] tipc: Node identity c6f1b9822bec, cluster identity 4711 [ 32.298624][ T3570] tipc: Enabled bearer , priority 0 [ 32.337489][ T3570] syzkaller0: entered promiscuous mode [ 32.343017][ T3570] syzkaller0: entered allmulticast mode [ 32.368877][ T3578] loop0: detected capacity change from 0 to 256 [ 32.376841][ T3570] tipc: Resetting bearer [ 32.377620][ T3578] ======================================================= [ 32.377620][ T3578] WARNING: The mand mount option has been deprecated and [ 32.377620][ T3578] and is ignored by this kernel. Remove the mand [ 32.377620][ T3578] option from the mount to silence this warning. [ 32.377620][ T3578] ======================================================= [ 32.417773][ T3569] tipc: Resetting bearer [ 32.425428][ T3569] tipc: Disabling bearer [ 32.428781][ T3578] msdos: Unknown parameter '?H(B a"!5' [ 32.431966][ T3579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3579 comm=syz.2.39 [ 32.547534][ T3587] netlink: 3 bytes leftover after parsing attributes in process `syz.3.45'. [ 32.560094][ T3587] batadv1: entered promiscuous mode [ 32.565383][ T3587] batadv1: entered allmulticast mode [ 32.700445][ T3592] loop3: detected capacity change from 0 to 512 [ 32.708240][ T3592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.741654][ T3592] EXT4-fs (loop3): 1 orphan inode deleted [ 32.749393][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.762566][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 32.775718][ T3592] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.802512][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.866730][ T3601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.920067][ T3604] loop1: detected capacity change from 0 to 512 [ 32.929053][ T3604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.957264][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.971832][ T3604] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.037732][ T3602] Process accounting resumed [ 33.069355][ T3610] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.52'. [ 33.077931][ T3604] syz.1.51 (3604) used greatest stack depth: 10416 bytes left [ 33.098602][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.142117][ T3616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.154604][ T3402] tipc: Node number set to 2886997007 [ 33.161946][ T3616] loop1: detected capacity change from 0 to 256 [ 33.171880][ T3616] FAT-fs (loop1): bogus number of FAT sectors [ 33.178153][ T3616] FAT-fs (loop1): Can't find a valid FAT filesystem [ 33.203822][ T3615] tipc: Enabled bearer , priority 0 [ 33.221342][ T3614] tipc: Resetting bearer [ 33.243664][ T3614] tipc: Disabling bearer [ 33.250970][ T3619] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 33.409785][ T3637] syzkaller0: entered promiscuous mode [ 33.415356][ T3637] syzkaller0: entered allmulticast mode [ 33.422380][ T3643] veth0: entered promiscuous mode [ 33.503308][ T3643] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 33.559031][ T3698] sd 0:0:1:0: device reset [ 33.575743][ T3601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.666063][ T3601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.740460][ T3601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.785400][ T3713] pim6reg1: entered promiscuous mode [ 33.790852][ T3713] pim6reg1: entered allmulticast mode [ 33.885413][ T3601] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.943619][ T3601] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.986081][ T3601] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.995623][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 34.048307][ T3601] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.059367][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.066803][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.074205][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.081639][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.089095][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.096593][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.103986][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x4 [ 34.111406][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.118835][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.126311][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.133778][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x2 [ 34.141195][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.148729][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.156174][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x4 [ 34.163576][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.171013][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.178511][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x2 [ 34.185997][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.193392][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.200857][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.208282][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.215699][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.223087][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.230558][ T3412] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 34.244661][ T3412] hid-generic 0006:0000:0000.0002: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 34.313867][ T2997] udevd[2997]: worker [3300] terminated by signal 33 (Unknown signal 33) [ 34.328829][ T2997] udevd[2997]: worker [3300] failed while handling '/devices/virtual/misc/uhid/0006:0000:0000.0002/hidraw/hidraw0' [ 34.376419][ T3725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'. [ 34.397961][ T3725] bond0: (slave bond_slave_0): Releasing backup interface [ 34.439597][ T3719] syz.2.72 (3719) used greatest stack depth: 10192 bytes left [ 34.557044][ T3742] mmap: syz.2.78 (3742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.572255][ T3744] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 34.583741][ T3742] loop2: detected capacity change from 0 to 1024 [ 34.593732][ T3745] pim6reg1: entered promiscuous mode [ 34.599107][ T3745] pim6reg1: entered allmulticast mode [ 34.604845][ T3742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.615670][ T3742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.629616][ T3742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 34.642741][ T3742] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.78: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.660968][ T3742] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.78: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.675438][ T3742] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.78: Failed to acquire dquot type 0 [ 34.686773][ T3742] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 34.696677][ T3742] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.78: mark_inode_dirty error [ 34.708326][ T3742] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 34.719409][ T3742] EXT4-fs (loop2): 1 orphan inode deleted [ 34.725712][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.737907][ T3674] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.753436][ T3674] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 34.768305][ T3742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.785642][ T3742] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.78: Invalid inode table block 1 in block_group 0 [ 34.809090][ T3751] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 34.817409][ T3742] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 34.828615][ T3742] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.78: mark_inode_dirty error [ 35.553879][ T3792] loop4: detected capacity change from 0 to 512 [ 35.571089][ T3792] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.98: iget: bad extended attribute block 1 [ 35.619248][ T3792] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.98: couldn't read orphan inode 15 (err -117) [ 35.634110][ T3792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.675519][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.735913][ T3756] delete_channel: no stack [ 35.760324][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 35.760338][ T29] audit: type=1400 audit(1749971775.350:520): avc: denied { listen } for pid=3794 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.786013][ T29] audit: type=1400 audit(1749971775.350:521): avc: denied { accept } for pid=3794 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.837325][ T29] audit: type=1400 audit(1749971775.430:522): avc: denied { map } for pid=3797 comm="syz.2.100" path="socket:[4963]" dev="sockfs" ino=4963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.860470][ T29] audit: type=1400 audit(1749971775.430:523): avc: denied { read accept } for pid=3797 comm="syz.2.100" path="socket:[4963]" dev="sockfs" ino=4963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.903497][ T3800] loop0: detected capacity change from 0 to 1024 [ 35.937929][ T29] audit: type=1400 audit(1749971775.530:524): avc: denied { create } for pid=3806 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.961850][ T29] audit: type=1400 audit(1749971775.550:525): avc: denied { map } for pid=3806 comm="syz.2.104" path="socket:[4985]" dev="sockfs" ino=4985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.985679][ T29] audit: type=1400 audit(1749971775.550:526): avc: denied { accept } for pid=3806 comm="syz.2.104" path="socket:[4985]" dev="sockfs" ino=4985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.009812][ T29] audit: type=1400 audit(1749971775.550:527): avc: denied { map } for pid=3806 comm="syz.2.104" path="socket:[4987]" dev="sockfs" ino=4987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.032703][ T29] audit: type=1400 audit(1749971775.550:528): avc: denied { read write } for pid=3806 comm="syz.2.104" path="socket:[4987]" dev="sockfs" ino=4987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.083389][ T3800] EXT4-fs: Ignoring removed nobh option [ 36.089082][ T3800] EXT4-fs: Ignoring removed bh option [ 36.109106][ T3800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.124018][ T29] audit: type=1400 audit(1749971775.710:529): avc: denied { bind } for pid=3799 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.170737][ T3800] syzkaller0: entered promiscuous mode [ 36.176325][ T3800] syzkaller0: entered allmulticast mode [ 36.197643][ T3816] __nla_validate_parse: 3 callbacks suppressed [ 36.197656][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 36.249061][ T3820] loop2: detected capacity change from 0 to 512 [ 36.269558][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.282006][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.299927][ T3820] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.333016][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 36.367205][ T3828] loop0: detected capacity change from 0 to 512 [ 36.386121][ T3828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.399011][ T3828] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.416379][ T3828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.110: bg 0: block 96: padding at end of block bitmap is not set [ 36.486922][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.923764][ T3856] loop3: detected capacity change from 0 to 1024 [ 37.114024][ T3862] netlink: 'syz.3.121': attribute type 13 has an invalid length. [ 37.175503][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.182737][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.195739][ T3871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.123'. [ 37.204710][ T3871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.123'. [ 37.207122][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.213549][ T3871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.123'. [ 37.213789][ T3871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.123'. [ 37.278914][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.289144][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.329820][ T3862] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.339011][ T3862] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.348185][ T3862] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.357167][ T3862] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.362096][ T3877] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 37.428759][ T3869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.457574][ T3879] tipc: Started in network mode [ 37.462596][ T3879] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 37.477051][ T3879] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 37.485261][ T3879] tipc: Enabled bearer , priority 10 [ 37.503477][ T3869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.514465][ T3862] syz.3.121 (3862) used greatest stack depth: 9824 bytes left [ 37.540180][ T3887] loop3: detected capacity change from 0 to 512 [ 37.550506][ T3885] loop2: detected capacity change from 0 to 512 [ 37.566502][ T3887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.576915][ T3885] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.129: casefold flag without casefold feature [ 37.590061][ T3885] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.129: couldn't read orphan inode 15 (err -117) [ 37.592746][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.604083][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.616464][ T3887] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.638197][ T3869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.700011][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.717922][ T3869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.832301][ T3869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.864154][ T3869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.915903][ T3869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.952237][ T3869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.230995][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.310083][ T3913] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.367424][ T3913] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.416671][ T3913] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.433590][ T3919] netlink: 'syz.2.140': attribute type 21 has an invalid length. [ 38.452809][ T3919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.140'. [ 38.478216][ T3913] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.491955][ T3921] team0: No ports can be present during mode change [ 38.604535][ T3187] tipc: Node number set to 1 [ 38.643415][ T3913] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.667894][ T3913] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.668530][ T3928] process 'syz.3.144' launched './file0' with NULL argv: empty string added [ 38.719375][ T3913] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.754749][ T3913] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.817384][ T3934] loop8: detected capacity change from 0 to 16384 [ 38.837581][ T3935] Zero length message leads to an empty skb [ 38.949212][ T3941] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.149'. [ 38.981843][ T3939] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.149'. [ 39.014638][ T3940] loop8: detected capacity change from 16384 to 0 [ 39.024793][ C0] I/O error, dev loop8, sector 7720 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 [ 39.057912][ T3947] loop3: detected capacity change from 0 to 512 [ 39.088192][ T3949] bridge: RTM_NEWNEIGH with invalid ether address [ 39.094297][ T3947] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.121881][ T3951] program syz.4.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.182232][ T3953] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.236901][ T3953] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.276028][ T3953] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.355901][ T3953] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.591892][ T3966] vlan2: entered allmulticast mode [ 39.650962][ T3970] loop1: detected capacity change from 0 to 256 [ 39.660780][ T3970] msdos: Unknown parameter '18446744073709551615' [ 39.708763][ T3972] loop1: detected capacity change from 0 to 128 [ 39.721419][ T3972] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.736444][ T3972] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.769712][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.141214][ T3986] bridge_slave_1: left allmulticast mode [ 40.147010][ T3986] bridge_slave_1: left promiscuous mode [ 40.152752][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.171122][ T3986] bridge_slave_0: left allmulticast mode [ 40.176845][ T3986] bridge_slave_0: left promiscuous mode [ 40.182588][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.242057][ T3989] pim6reg1: entered promiscuous mode [ 40.247451][ T3989] pim6reg1: entered allmulticast mode [ 40.519831][ T3997] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 40.530262][ T3997] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 40.608024][ T4008] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 40.620226][ T4008] team0 (unregistering): Port device team_slave_0 removed [ 40.630269][ T4008] team0 (unregistering): Port device team_slave_1 removed [ 40.831474][ T4018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.883356][ T4018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.963614][ T4018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.043038][ T4018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.123804][ T4018] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135351][ T4018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.146635][ T4018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.157834][ T4018] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.211282][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 41.211296][ T29] audit: type=1400 audit(1749971780.800:641): avc: denied { read } for pid=4025 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.244307][ T4026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 41.285791][ T29] audit: type=1400 audit(1749971780.880:642): avc: denied { write } for pid=4031 comm="syz.2.184" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.293738][ T4032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 41.311800][ T29] audit: type=1400 audit(1749971780.880:643): avc: denied { ioctl } for pid=4031 comm="syz.2.184" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.343222][ T29] audit: type=1326 audit(1749971780.880:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.343923][ T4034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.366495][ T29] audit: type=1326 audit(1749971780.880:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.377439][ T4034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.398265][ T29] audit: type=1326 audit(1749971780.880:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.429191][ T29] audit: type=1326 audit(1749971780.880:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.452518][ T29] audit: type=1326 audit(1749971780.880:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.475739][ T29] audit: type=1326 audit(1749971780.880:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.476145][ T29] audit: type=1326 audit(1749971780.970:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4031 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 41.839113][ T4053] bridge0: entered promiscuous mode [ 41.844420][ T4053] macvtap1: entered allmulticast mode [ 41.849854][ T4053] bridge0: entered allmulticast mode [ 41.856559][ T4053] bridge0: port 3(macvtap1) entered blocking state [ 41.863160][ T4053] bridge0: port 3(macvtap1) entered disabled state [ 41.871830][ T4053] bridge0: left allmulticast mode [ 41.877036][ T4053] bridge0: left promiscuous mode [ 42.601541][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 42.610467][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 42.767842][ T4088] loop2: detected capacity change from 0 to 1024 [ 42.775093][ T4088] EXT4-fs: Ignoring removed nobh option [ 42.780695][ T4088] EXT4-fs: Ignoring removed bh option [ 42.808503][ T4088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.826654][ T4088] EXT4-fs (loop2): shut down requested (2) [ 42.902176][ T4102] loop0: detected capacity change from 0 to 512 [ 42.912268][ T4102] EXT4-fs: Ignoring removed i_version option [ 42.918323][ T4102] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.937231][ T4102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.947525][ T4102] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 42.975848][ T3953] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.001206][ T3953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.015420][ T3953] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.029027][ T3953] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.059149][ T4113] vlan2: entered allmulticast mode [ 43.337050][ T4121] loop3: detected capacity change from 0 to 512 [ 43.348656][ T4121] EXT4-fs: Ignoring removed i_version option [ 43.364985][ T4121] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.387366][ T4121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.405122][ T4131] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.418954][ T4121] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 43.494143][ T4131] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.515829][ T4121] loop3: detected capacity change from 0 to 1024 [ 43.551620][ T4121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.566151][ T4131] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.588252][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.607992][ T4143] bridge: RTM_NEWNEIGH with invalid ether address [ 43.625135][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.637184][ T4131] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.661955][ T4148] loop9: detected capacity change from 0 to 7 [ 43.668528][ T4148] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.676827][ T4148] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.684764][ T4148] loop9: unable to read partition table [ 43.690641][ T4148] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 43.690641][ T4148] U) failed (rc=-5) [ 43.705580][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.713515][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.721591][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.733036][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.741238][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.749410][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.752714][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 43.769458][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.777680][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.803643][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 43.825714][ T4155] loop1: detected capacity change from 0 to 1024 [ 43.833927][ T4155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.842992][ T4155] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.853953][ T4155] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.864840][ T4155] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 43.871277][ T4155] EXT4-fs (loop1): mount failed [ 45.588820][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 45.597710][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 45.609438][ T4220] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.617729][ T4220] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.625964][ T4220] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.634149][ T4220] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.759331][ T4224] wg2: entered promiscuous mode [ 45.764291][ T4224] wg2: entered allmulticast mode [ 45.972802][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 45.994328][ T4226] vlan2: entered allmulticast mode [ 45.999553][ T4226] bond1: entered allmulticast mode [ 46.259211][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 46.259230][ T29] audit: type=1400 audit(1749971785.850:751): avc: denied { write } for pid=4229 comm="syz.1.254" name="ipv6_route" dev="proc" ino=4026532494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.342971][ T4233] loop2: detected capacity change from 0 to 512 [ 46.474858][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.515285][ T4233] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.543036][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.552151][ T29] audit: type=1400 audit(1749971786.120:752): avc: denied { ioctl } for pid=4232 comm="syz.2.255" path="/65/bus/pids.current" dev="loop2" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.617132][ T29] audit: type=1326 audit(1749971786.200:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.640519][ T29] audit: type=1326 audit(1749971786.200:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.663973][ T29] audit: type=1326 audit(1749971786.200:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.687460][ T29] audit: type=1326 audit(1749971786.200:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.710813][ T29] audit: type=1326 audit(1749971786.200:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.734326][ T29] audit: type=1326 audit(1749971786.200:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.757561][ T29] audit: type=1326 audit(1749971786.200:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.780841][ T29] audit: type=1326 audit(1749971786.200:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12a90e929 code=0x7ffc0000 [ 46.822414][ T4252] capability: warning: `syz.2.260' uses deprecated v2 capabilities in a way that may be insecure [ 46.915316][ T4257] vhci_hcd: invalid port number 254 [ 47.173078][ T4273] netlink: 'syz.1.269': attribute type 4 has an invalid length. [ 47.194833][ T4273] netlink: 'syz.1.269': attribute type 4 has an invalid length. [ 47.245414][ T4280] : renamed from tunl0 (while UP) [ 47.335428][ T4286] loop3: detected capacity change from 0 to 512 [ 47.357686][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.370785][ T4288] loop1: detected capacity change from 0 to 512 [ 47.377589][ T4286] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.390059][ T4288] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 47.420007][ T4286] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 47.439687][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.557033][ T4297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 47.566744][ T4297] netlink: 3 bytes leftover after parsing attributes in process `syz.3.278'. [ 47.578857][ T4297] batadv1: entered promiscuous mode [ 47.584148][ T4297] batadv1: entered allmulticast mode [ 47.598388][ T4304] @: renamed from vlan0 (while UP) [ 47.621561][ T4306] netlink: 3 bytes leftover after parsing attributes in process `syz.3.278'. [ 47.633471][ T4306] batadv1: entered promiscuous mode [ 47.638818][ T4306] batadv1: entered allmulticast mode [ 47.645810][ T4307] loop1: detected capacity change from 0 to 512 [ 47.666125][ T4307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.678810][ T4307] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.689785][ T4307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.807727][ T4316] loop3: detected capacity change from 0 to 2048 [ 47.826903][ T4316] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.834270][ T4316] EXT4-fs (loop3): mount failed [ 47.852919][ T4320] bridge: RTM_NEWNEIGH with invalid ether address [ 47.905824][ T4324] tipc: New replicast peer: 0.0.255.255 [ 47.911449][ T4324] tipc: Enabled bearer , priority 10 [ 47.964204][ T4327] loop2: detected capacity change from 0 to 512 [ 48.020572][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.038686][ T4327] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.056252][ T4327] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 48.077868][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.133456][ T4334] uprobe: syz.2.291:4334 failed to unregister, leaking uprobe [ 48.251798][ T4340] lo speed is unknown, defaulting to 1000 [ 48.257937][ T4340] lo speed is unknown, defaulting to 1000 [ 48.264033][ T4340] lo speed is unknown, defaulting to 1000 [ 48.270667][ T4340] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.278679][ T4340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 48.289955][ T4340] lo speed is unknown, defaulting to 1000 [ 48.296747][ T4340] lo speed is unknown, defaulting to 1000 [ 48.303829][ T4340] lo speed is unknown, defaulting to 1000 [ 48.310506][ T4340] lo speed is unknown, defaulting to 1000 [ 48.316690][ T4340] lo speed is unknown, defaulting to 1000 [ 48.339897][ T4131] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.355634][ T4131] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.376358][ T4131] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.389650][ T4131] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.423384][ T4347] wg2: entered promiscuous mode [ 48.428447][ T4347] wg2: entered allmulticast mode [ 48.437875][ T4345] loop2: detected capacity change from 0 to 256 [ 48.473973][ T4345] FAT-fs (loop2): Directory bread(block 64) failed [ 48.508550][ T4345] FAT-fs (loop2): Directory bread(block 65) failed [ 48.528169][ T4345] FAT-fs (loop2): Directory bread(block 66) failed [ 48.565675][ T4345] FAT-fs (loop2): Directory bread(block 67) failed [ 48.582552][ T4345] FAT-fs (loop2): Directory bread(block 68) failed [ 48.602600][ T4345] FAT-fs (loop2): Directory bread(block 69) failed [ 48.634925][ T4345] FAT-fs (loop2): Directory bread(block 70) failed [ 48.644492][ T4345] FAT-fs (loop2): Directory bread(block 71) failed [ 48.653259][ T4345] FAT-fs (loop2): Directory bread(block 72) failed [ 48.682862][ T4345] FAT-fs (loop2): Directory bread(block 73) failed [ 48.702967][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.719097][ T4345] usb usb1: usbfs: process 4345 (syz.2.296) did not claim interface 0 before use [ 48.746342][ T4360] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 48.772157][ T4360] syzkaller0: entered promiscuous mode [ 48.777748][ T4360] syzkaller0: entered allmulticast mode [ 48.803778][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.982203][ T4367] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.992039][ T4367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.024750][ T23] tipc: Node number set to 3978148226 [ 49.045938][ T4367] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.055745][ T4367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.185873][ T4367] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.195676][ T4367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.197498][ T4385] loop2: detected capacity change from 0 to 512 [ 49.253430][ T4385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.268436][ T4367] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.278325][ T4367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.340261][ T4385] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.308: invalid block [ 49.365415][ T4390] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 49.392070][ T4367] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.400309][ T4367] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.432258][ T4367] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.440482][ T4367] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.483108][ T4367] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.491465][ T4367] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.511121][ T4396] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 49.525733][ T4367] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.533974][ T4367] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.573712][ T4385] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.308: invalid indirect mapped block 4294967295 (level 1) [ 49.591797][ T4399] bond_slave_1: entered promiscuous mode [ 49.599779][ T4385] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.308: invalid indirect mapped block 4294967295 (level 1) [ 49.600585][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 49.637238][ T4385] EXT4-fs (loop2): 2 truncates cleaned up [ 49.649698][ T4385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.736836][ T4397] bond0: (slave bond_slave_1): Releasing backup interface [ 49.799836][ T4397] bond_slave_1 (unregistering): left promiscuous mode [ 49.939422][ T4404] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 50.022144][ T4407] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 50.390268][ T4409] loop0: detected capacity change from 0 to 2048 [ 50.397170][ T4409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.445943][ T4409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.473969][ T4409] EXT4-fs error (device loop0): ext4_read_inline_dir:1502: inode #12: block 5: comm syz.0.317: path /53/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 50.499004][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.509506][ T4409] EXT4-fs (loop0): Remounting filesystem read-only [ 50.520599][ T4409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.585324][ T4422] vhci_hcd: invalid port number 96 [ 50.590469][ T4422] vhci_hcd: default hub control req: 0400 v1b14 i0060 l0 [ 50.689546][ T4418] infiniband syz!: set down [ 50.694189][ T4418] infiniband syz!: added team_slave_0 [ 50.705215][ T4418] RDS/IB: syz!: added [ 50.709372][ T4418] smc: adding ib device syz! with port count 1 [ 50.715682][ T4418] smc: ib device syz! port 1 has pnetid [ 50.821884][ T4436] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 50.835160][ T36] lo speed is unknown, defaulting to 1000 [ 50.840949][ T36] syz0: Port: 1 Link DOWN [ 50.846746][ T4436] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 50.856237][ T36] lo speed is unknown, defaulting to 1000 [ 50.861969][ T36] syz0: Port: 1 Link ACTIVE [ 50.954890][ T4440] lo speed is unknown, defaulting to 1000 [ 51.363406][ T4450] bond0: (slave bond_slave_0): Releasing backup interface [ 51.379890][ T4450] bond0: (slave bond_slave_1): Releasing backup interface [ 51.412591][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.420143][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.430655][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.438201][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.444265][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.452799][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.460309][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.481959][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.489398][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.496818][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.504257][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.511682][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.519094][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.526630][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.534030][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.541593][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.549075][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.613240][ T4461] wireguard0: entered promiscuous mode [ 51.618974][ T4461] wireguard0: entered allmulticast mode [ 51.633185][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.640673][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.648100][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.655607][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.663028][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.670522][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.677959][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.685458][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.692851][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.700301][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.707742][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.715240][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.722631][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.730047][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.737483][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.746880][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.801676][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 51.801690][ T29] audit: type=1400 audit(1749971791.390:878): avc: denied { execute } for pid=4475 comm="syz.2.340" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.921694][ T4480] ref_ctr_offset mismatch. inode: 0xfb offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 51.988281][ T4497] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 51.998774][ T4497] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 52.035631][ T4500] wireguard0: entered promiscuous mode [ 52.041146][ T4500] wireguard0: entered allmulticast mode [ 52.085966][ T4495] bridge_slave_0: left promiscuous mode [ 52.091694][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.093176][ T4506] netlink: 3 bytes leftover after parsing attributes in process `syz.0.350'. [ 52.111043][ T4495] bridge_slave_1: left allmulticast mode [ 52.116787][ T4495] bridge_slave_1: left promiscuous mode [ 52.122578][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.134147][ T4495] bond0: (slave bond_slave_0): Releasing backup interface [ 52.144519][ T4495] bond0: (slave bond_slave_1): Releasing backup interface [ 52.158033][ T4495] team0: Port device team_slave_0 removed [ 52.168696][ T4495] team0: Port device team_slave_1 removed [ 52.172040][ T4473] Process accounting resumed [ 52.177342][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.186798][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.196821][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.204415][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.225215][ T4506] batadv1: entered promiscuous mode [ 52.230502][ T4506] batadv1: entered allmulticast mode [ 52.315201][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.322628][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.330114][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.337523][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.344975][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.352347][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.359800][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.367240][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.374671][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.382121][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.389668][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.397137][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.404654][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.413043][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.420572][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.428010][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.435431][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.442905][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.450344][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.457837][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.465260][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.472676][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480125][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480150][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480173][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480209][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480226][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.480243][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.518598][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.550735][ T4523] ref_ctr_offset mismatch. inode: 0x156 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 52.646811][ T4535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4535 comm=syz.4.361 [ 52.877143][ T4542] loop0: detected capacity change from 0 to 512 [ 52.884189][ T4542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.904046][ T4542] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.373: invalid block [ 52.986541][ T4542] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.373: invalid indirect mapped block 4294967295 (level 1) [ 53.018175][ T4542] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.373: invalid indirect mapped block 4294967295 (level 1) [ 53.033611][ T4542] EXT4-fs (loop0): 2 truncates cleaned up [ 53.039762][ T4542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.102059][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.158406][ T4548] bridge_slave_0: left allmulticast mode [ 53.164117][ T4548] bridge_slave_0: left promiscuous mode [ 53.169818][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.176983][ T4543] Process accounting resumed [ 53.199122][ T4548] bridge_slave_1: left allmulticast mode [ 53.204807][ T4548] bridge_slave_1: left promiscuous mode [ 53.210533][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.224173][ T4548] bond0: (slave bond_slave_0): Releasing backup interface [ 53.231589][ T4554] loop2: detected capacity change from 0 to 512 [ 53.238161][ T4548] bond0: (slave bond_slave_1): Releasing backup interface [ 53.247033][ T4548] team0: Port device team_slave_0 removed [ 53.253438][ T4548] team0: Port device team_slave_1 removed [ 53.256839][ T4554] EXT4-fs (loop2): 1 orphan inode deleted [ 53.259656][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.265405][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.285579][ T4554] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.297716][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.305321][ T3639] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 53.315087][ T3639] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 53.514190][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.564315][ T4563] loop4: detected capacity change from 0 to 1024 [ 53.578471][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.585964][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.593356][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.605594][ T4563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.614369][ T4563] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.630413][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.637928][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.645381][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.652792][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.660201][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.667645][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.675106][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.682511][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.690051][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.690309][ T4563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 53.697443][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.697518][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.720416][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.727845][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.735353][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.742749][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.750172][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.752909][ T4563] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.368: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.757622][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.773050][ T4563] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 53.778813][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.788237][ T4563] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.368: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.794252][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.809821][ T4563] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 53.815594][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.824345][ T4563] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.368: Failed to acquire dquot type 0 [ 53.831752][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.831780][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.845322][ T4552] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.850330][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.867578][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.876413][ T4563] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 53.882245][ T3187] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.891845][ T4563] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.368: mark_inode_dirty error [ 53.911850][ T3187] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.921733][ T4563] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.933262][ T4563] EXT4-fs (loop4): 1 orphan inode deleted [ 53.939903][ T4563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.953105][ T3693] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.969458][ T3693] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 53.978048][ T3693] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 0 [ 53.991906][ T4563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.002969][ T4563] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.368: Invalid inode table block 1 in block_group 0 [ 54.015735][ T4563] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 54.026612][ T4563] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.368: mark_inode_dirty error [ 54.031490][ T4570] loop1: detected capacity change from 0 to 256 [ 54.044747][ T4570] msdos: Unknown parameter '?H(B a"!5' [ 54.059674][ T4552] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.107085][ T4552] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.122763][ T4576] loop9: detected capacity change from 0 to 7 [ 54.125239][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'. [ 54.129268][ T4576] buffer_io_error: 2 callbacks suppressed [ 54.129282][ T4576] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.151772][ T4576] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.159717][ T4576] loop9: unable to read partition table [ 54.160229][ T4578] lo speed is unknown, defaulting to 1000 [ 54.166424][ T4576] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 54.166424][ T4576] U) failed (rc=-5) [ 54.206946][ T4552] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.218559][ T4582] tipc: New replicast peer: 255.255.255.255 [ 54.224819][ T4582] tipc: Enabled bearer , priority 10 [ 54.257668][ T4552] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.273296][ T4552] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.288287][ T4552] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.302168][ T4552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.366023][ T4594] openvswitch: netlink: Message has 6 unknown bytes. [ 54.423090][ T4597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 54.438904][ T4599] loop1: detected capacity change from 0 to 512 [ 54.476310][ T4599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.494930][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 54.541454][ T4599] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.380: invalid block [ 54.573383][ T4599] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.380: invalid indirect mapped block 4294967295 (level 1) [ 54.589057][ T4599] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.380: invalid indirect mapped block 4294967295 (level 1) [ 54.606712][ T4599] EXT4-fs (loop1): 2 truncates cleaned up [ 54.619161][ T4605] geneve0: entered allmulticast mode [ 54.619514][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.713929][ T4600] ref_ctr_offset mismatch. inode: 0x171 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 54.795260][ T4609] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 54.808636][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.828735][ T4609] bond1: entered promiscuous mode [ 54.833808][ T4609] bond1: entered allmulticast mode [ 54.845915][ T4609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.869605][ T29] audit: type=1326 audit(1749971794.460:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 54.888298][ T4609] ip6gretap1: entered promiscuous mode [ 54.892867][ T29] audit: type=1326 audit(1749971794.460:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 54.898552][ T4609] ip6gretap1: entered allmulticast mode [ 54.921514][ T29] audit: type=1326 audit(1749971794.460:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 54.938076][ T4609] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 54.950243][ T29] audit: type=1326 audit(1749971794.460:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 54.959082][ T3656] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.992200][ T29] audit: type=1326 audit(1749971794.460:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 55.064993][ T3656] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 55.185892][ T4625] ref_ctr_offset mismatch. inode: 0x197 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 55.289062][ T4636] loop4: detected capacity change from 0 to 2048 [ 55.298264][ T4636] EXT4-fs: Ignoring removed bh option [ 55.317083][ T4636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.334420][ T4636] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 55.414473][ T4645] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.422744][ T4645] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.431184][ T4645] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.439416][ T4645] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.448537][ T4645] geneve2: entered promiscuous mode [ 55.453864][ T4645] geneve2: entered allmulticast mode [ 55.492017][ T4645] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.500541][ T4645] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.509059][ T4645] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.517545][ T4645] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.526918][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.585981][ T4650] SELinux: syz.4.403 (4650) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.773551][ T4653] syzkaller0: entered promiscuous mode [ 55.779098][ T4653] syzkaller0: entered allmulticast mode [ 56.025841][ T4657] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 56.074070][ T4657] bond2: entered promiscuous mode [ 56.079144][ T4657] bond2: entered allmulticast mode [ 56.084435][ T4657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.098437][ T4657] ip6gretap1: entered promiscuous mode [ 56.103980][ T4657] ip6gretap1: entered allmulticast mode [ 56.110007][ T4657] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 56.170293][ T4664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.416'. [ 56.174750][ T3652] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 56.296013][ T3693] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 56.317624][ T4676] loop4: detected capacity change from 0 to 128 [ 56.326273][ T4677] lo speed is unknown, defaulting to 1000 [ 56.457079][ T4684] bio_check_eod: 61 callbacks suppressed [ 56.457097][ T4684] syz.4.411: attempt to access beyond end of device [ 56.457097][ T4684] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 56.471083][ T4686] tipc: Started in network mode [ 56.481087][ T4686] tipc: Node identity 8a09ff08e095, cluster identity 4711 [ 56.488325][ T4686] tipc: Enabled bearer , priority 0 [ 56.759096][ T4684] syz.4.411: attempt to access beyond end of device [ 56.759096][ T4684] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 56.784943][ T4686] syzkaller0: entered promiscuous mode [ 56.790502][ T4686] syzkaller0: entered allmulticast mode [ 56.947389][ T4686] tipc: Resetting bearer [ 56.967320][ T4692] vhci_hcd: invalid port number 254 [ 57.005040][ T4684] syz.4.411: attempt to access beyond end of device [ 57.005040][ T4684] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 57.061144][ T4681] tipc: Resetting bearer [ 57.080635][ T4694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 57.106590][ T4681] tipc: Disabling bearer [ 57.116736][ T4684] syz.4.411: attempt to access beyond end of device [ 57.116736][ T4684] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 57.246476][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 57.258725][ T4684] syz.4.411: attempt to access beyond end of device [ 57.258725][ T4684] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 57.301647][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 57.301658][ T29] audit: type=1326 audit(1749971796.890:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044b5658e7 code=0x7ffc0000 [ 57.345076][ T4684] syz.4.411: attempt to access beyond end of device [ 57.345076][ T4684] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 57.418843][ T4684] syz.4.411: attempt to access beyond end of device [ 57.418843][ T4684] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 57.478833][ T29] audit: type=1326 audit(1749971796.920:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f044b50ab19 code=0x7ffc0000 [ 57.502107][ T29] audit: type=1326 audit(1749971796.920:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044b56e929 code=0x7ffc0000 [ 57.525424][ T29] audit: type=1326 audit(1749971796.930:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044b5658e7 code=0x7ffc0000 [ 57.548769][ T29] audit: type=1326 audit(1749971796.930:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f044b50ab19 code=0x7ffc0000 [ 57.572039][ T29] audit: type=1326 audit(1749971796.930:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044b5658e7 code=0x7ffc0000 [ 57.584673][ T4684] syz.4.411: attempt to access beyond end of device [ 57.584673][ T4684] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 57.595237][ T29] audit: type=1326 audit(1749971796.930:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f044b50ab19 code=0x7ffc0000 [ 57.595271][ T29] audit: type=1326 audit(1749971796.930:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044b5658e7 code=0x7ffc0000 [ 57.595315][ T29] audit: type=1326 audit(1749971796.930:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f044b50ab19 code=0x7ffc0000 [ 57.675015][ T4684] syz.4.411: attempt to access beyond end of device [ 57.675015][ T4684] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 57.678326][ T29] audit: type=1326 audit(1749971796.930:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044b5658e7 code=0x7ffc0000 [ 57.734616][ T4684] syz.4.411: attempt to access beyond end of device [ 57.734616][ T4684] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 57.738721][ T4700] syzkaller0: entered promiscuous mode [ 57.753530][ T4700] syzkaller0: entered allmulticast mode [ 57.787727][ T4702] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 58.288308][ T4720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.426'. [ 58.805908][ T4728] wireguard0: entered promiscuous mode [ 58.811465][ T4728] wireguard0: entered allmulticast mode [ 58.822442][ T4731] loop3: detected capacity change from 0 to 512 [ 58.837181][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.850728][ T4731] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.867244][ T4731] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 58.875272][ T4698] syz.1.419 (4698) used greatest stack depth: 6776 bytes left [ 58.894611][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.920370][ T4738] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 58.932769][ T4738] syzkaller0: entered promiscuous mode [ 58.938460][ T4738] syzkaller0: entered allmulticast mode [ 59.012834][ T4747] loop1: detected capacity change from 0 to 1024 [ 59.020006][ T4747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.037791][ T4751] loop4: detected capacity change from 0 to 256 [ 59.059709][ T4751] FAT-fs (loop4): Directory bread(block 64) failed [ 59.066012][ T4747] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.069068][ T4751] FAT-fs (loop4): Directory bread(block 65) failed [ 59.084065][ T4751] FAT-fs (loop4): Directory bread(block 66) failed [ 59.092101][ T4751] FAT-fs (loop4): Directory bread(block 67) failed [ 59.098792][ T4751] FAT-fs (loop4): Directory bread(block 68) failed [ 59.106817][ T4751] FAT-fs (loop4): Directory bread(block 69) failed [ 59.109892][ T4747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 59.113441][ T4751] FAT-fs (loop4): Directory bread(block 70) failed [ 59.128098][ T4751] FAT-fs (loop4): Directory bread(block 71) failed [ 59.134714][ T4751] FAT-fs (loop4): Directory bread(block 72) failed [ 59.141301][ T4751] FAT-fs (loop4): Directory bread(block 73) failed [ 59.179414][ T4747] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.431: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.191905][ T4751] usb usb1: usbfs: process 4751 (syz.4.435) did not claim interface 0 before use [ 59.215049][ T4747] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.431: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.242493][ T4747] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.431: Failed to acquire dquot type 0 [ 59.262021][ T4747] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 59.271997][ T4747] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.431: mark_inode_dirty error [ 59.283650][ T4747] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 59.296801][ T4747] EXT4-fs (loop1): 1 orphan inode deleted [ 59.317090][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.365942][ T3693] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.430504][ T3693] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 0 [ 59.459257][ T4747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.476675][ T4747] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.431: Invalid inode table block 1 in block_group 0 [ 59.491342][ T4747] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 59.529248][ T4746] Set syz1 is full, maxelem 65536 reached [ 59.566785][ T4747] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.431: mark_inode_dirty error [ 59.668386][ T4764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 59.701231][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 59.734615][ T4761] loop3: detected capacity change from 0 to 512 [ 59.778448][ T4766] loop1: detected capacity change from 0 to 512 [ 59.896183][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.913187][ T4761] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.925750][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.941037][ T4761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.950579][ T4772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.443'. [ 59.981246][ T4766] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.016869][ T4766] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 60.038942][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.121638][ T4782] wg2: entered promiscuous mode [ 60.126554][ T4782] wg2: entered allmulticast mode [ 60.160801][ T4784] wireguard0: entered promiscuous mode [ 60.166302][ T4784] wireguard0: entered allmulticast mode [ 60.270412][ T4793] lo speed is unknown, defaulting to 1000 [ 60.446158][ T4800] loop1: detected capacity change from 0 to 512 [ 60.452833][ T4800] EXT4-fs: Ignoring removed orlov option [ 60.459706][ T4800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.469037][ T4800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.478164][ T4800] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.451: bg 0: block 248: padding at end of block bitmap is not set [ 60.493677][ T4800] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.451: Failed to acquire dquot type 1 [ 60.533341][ T4800] EXT4-fs (loop1): 1 truncate cleaned up [ 60.546257][ T4800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.601760][ T4800] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 60.616104][ T4800] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 60.624615][ T4800] ext4 filesystem being remounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.647618][ T4800] lo speed is unknown, defaulting to 1000 [ 60.840386][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.856600][ T4808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4808 comm=syz.0.453 [ 60.869076][ T4808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4808 comm=syz.0.453 [ 60.941663][ T4812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.006474][ T4812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.049274][ T4812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.102664][ T4819] loop4: detected capacity change from 0 to 128 [ 61.137075][ T4821] loop3: detected capacity change from 0 to 2048 [ 61.146157][ T4812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.185100][ T4821] loop3: p1 < > p4 [ 61.189939][ T4821] loop3: p4 size 8388608 extends beyond EOD, truncated [ 61.205646][ T4812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.230267][ T4812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.243845][ T4812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.257152][ T4812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.570580][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 61.585980][ T4832] netlink: 3 bytes leftover after parsing attributes in process `syz.4.463'. [ 61.603265][ T4832] batadv1: entered promiscuous mode [ 61.608568][ T4832] batadv1: entered allmulticast mode [ 61.636735][ T4835] netlink: 3 bytes leftover after parsing attributes in process `syz.4.463'. [ 61.648861][ T4835] batadv1: entered promiscuous mode [ 61.654225][ T4835] batadv1: entered allmulticast mode [ 61.698152][ T4838] loop0: detected capacity change from 0 to 512 [ 61.726783][ T4838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.744656][ T4838] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.758829][ T4838] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.792491][ T4834] loop3: detected capacity change from 0 to 512 [ 61.799424][ T4834] EXT4-fs: Ignoring removed orlov option [ 61.826747][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.836224][ T4834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.847316][ T4834] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.854127][ T4834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.475: bg 0: block 248: padding at end of block bitmap is not set [ 61.869765][ T4834] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.475: Failed to acquire dquot type 1 [ 61.881431][ T4834] EXT4-fs (loop3): 1 truncate cleaned up [ 61.888292][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.903609][ T4834] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 61.929427][ T4834] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.937869][ T4834] ext4 filesystem being remounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.958381][ T4834] lo speed is unknown, defaulting to 1000 [ 62.085999][ T4852] lo speed is unknown, defaulting to 1000 [ 62.186803][ T4845] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 62.228178][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.230879][ T4859] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 62.278248][ T4859] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 62.305967][ T4863] loop2: detected capacity change from 0 to 128 [ 62.346750][ T4865] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.376521][ T4868] bio_check_eod: 170 callbacks suppressed [ 62.376535][ T4868] syz.2.471: attempt to access beyond end of device [ 62.376535][ T4868] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 62.382427][ T4867] loop3: detected capacity change from 0 to 128 [ 62.404110][ T4868] syz.2.471: attempt to access beyond end of device [ 62.404110][ T4868] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 62.420316][ T4865] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.442862][ T4868] syz.2.471: attempt to access beyond end of device [ 62.442862][ T4868] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 62.466931][ T4868] syz.2.471: attempt to access beyond end of device [ 62.466931][ T4868] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 62.481796][ T4868] syz.2.471: attempt to access beyond end of device [ 62.481796][ T4868] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 62.497892][ T4868] syz.2.471: attempt to access beyond end of device [ 62.497892][ T4868] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 62.512208][ T4868] syz.2.471: attempt to access beyond end of device [ 62.512208][ T4868] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 62.525906][ T4868] syz.2.471: attempt to access beyond end of device [ 62.525906][ T4868] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 62.539406][ T4868] syz.2.471: attempt to access beyond end of device [ 62.539406][ T4868] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 62.559792][ T4868] syz.2.471: attempt to access beyond end of device [ 62.559792][ T4868] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 62.591323][ T4865] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.649781][ T4865] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.822170][ T4865] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.843704][ T4865] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.856164][ T4865] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.868781][ T4865] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.957636][ T4892] loop2: detected capacity change from 0 to 512 [ 62.994439][ T4892] EXT4-fs: Ignoring removed orlov option [ 63.008859][ T4892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.029132][ T4892] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.037235][ T4892] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.484: bg 0: block 248: padding at end of block bitmap is not set [ 63.052750][ T4892] __quota_error: 747 callbacks suppressed [ 63.052818][ T4892] Quota error (device loop2): write_blk: dquota write failed [ 63.066168][ T4892] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 63.076138][ T4892] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.484: Failed to acquire dquot type 1 [ 63.089847][ T4892] EXT4-fs (loop2): 1 truncate cleaned up [ 63.161016][ T4892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.353706][ T4889] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.374967][ T4889] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 63.383346][ T4889] ext4 filesystem being remounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.404975][ T4889] lo speed is unknown, defaulting to 1000 [ 63.648046][ T4906] loop3: detected capacity change from 0 to 128 [ 63.658920][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 63.686229][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.711717][ T29] audit: type=1326 audit(1749971803.300:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.804560][ T29] audit: type=1326 audit(1749971803.300:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.827987][ T29] audit: type=1326 audit(1749971803.310:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.851285][ T29] audit: type=1326 audit(1749971803.310:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.874849][ T29] audit: type=1326 audit(1749971803.310:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.898391][ T29] audit: type=1326 audit(1749971803.310:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.921769][ T29] audit: type=1326 audit(1749971803.310:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.945075][ T29] audit: type=1326 audit(1749971803.310:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48729de929 code=0x7ffc0000 [ 63.996604][ T4916] loop0: detected capacity change from 0 to 128 [ 64.352416][ T4921] loop0: detected capacity change from 0 to 256 [ 64.385250][ T4921] FAT-fs (loop0): bogus sectors per cluster 255 [ 64.391650][ T4921] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.697197][ T4937] x_tables: ip_tables: osf match: only valid for protocol 6 [ 65.557231][ T4951] pim6reg1: entered promiscuous mode [ 65.562662][ T4951] pim6reg1: entered allmulticast mode [ 65.659939][ T4966] loop4: detected capacity change from 0 to 128 [ 65.679130][ T4966] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.714580][ T4966] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.740000][ T4962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 65.765767][ T4974] tipc: Enabled bearer , priority 0 [ 65.777211][ T4973] tipc: Resetting bearer [ 65.802507][ T4973] tipc: Disabling bearer [ 65.812236][ T4962] netlink: 3 bytes leftover after parsing attributes in process `syz.2.510'. [ 65.822608][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.825027][ T4962] batadv1: entered promiscuous mode [ 65.836914][ T4962] batadv1: entered allmulticast mode [ 65.872741][ T4983] netlink: 3 bytes leftover after parsing attributes in process `syz.2.510'. [ 65.889115][ T4983] batadv1: entered promiscuous mode [ 65.894434][ T4983] batadv1: entered allmulticast mode [ 66.028574][ T5000] loop2: detected capacity change from 0 to 128 [ 66.053285][ T5000] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.074730][ T5000] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.262556][ T5000] lo speed is unknown, defaulting to 1000 [ 66.426585][ T5005] loop3: detected capacity change from 0 to 8192 [ 66.495551][ T5005] loop3: p1 p2 p3 [ 66.499809][ T5005] loop3: p2 start 3506442254 is beyond EOD, truncated [ 66.506628][ T5005] loop3: p3 size 49412 extends beyond EOD, truncated [ 66.554446][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.750259][ T5018] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.760264][ T5018] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.777427][ T5016] netlink: zone id is out of range [ 66.782597][ T5016] netlink: zone id is out of range [ 66.787826][ T5016] netlink: zone id is out of range [ 66.793049][ T5016] netlink: zone id is out of range [ 66.798236][ T5016] netlink: zone id is out of range [ 66.828942][ T5018] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.838832][ T5018] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.915919][ T5018] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.925730][ T5018] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.966000][ T5018] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.975880][ T5018] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.021454][ T5018] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.029686][ T5018] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.040736][ T5018] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.049064][ T5018] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.060275][ T5018] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.068493][ T5018] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.079555][ T5018] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.087873][ T5018] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.134023][ T5028] loop1: detected capacity change from 0 to 128 [ 67.148581][ T5029] netlink: 'syz.2.531': attribute type 4 has an invalid length. [ 67.165161][ T3419] lo speed is unknown, defaulting to 1000 [ 67.170927][ T3419] syz0: Port: 1 Link DOWN [ 67.252504][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 67.273640][ T5036] syzkaller0: entered promiscuous mode [ 67.279234][ T5036] syzkaller0: entered allmulticast mode [ 67.303794][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 67.324617][ T5039] macvtap1: entered promiscuous mode [ 67.330016][ T5039] syz_tun: entered promiscuous mode [ 67.335351][ T5039] macvtap1: entered allmulticast mode [ 67.340802][ T5039] syz_tun: entered allmulticast mode [ 67.353880][ T5041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 67.374790][ T5041] netlink: 3 bytes leftover after parsing attributes in process `syz.0.533'. [ 67.384583][ T5028] bio_check_eod: 10339 callbacks suppressed [ 67.384629][ T5028] syz.1.530: attempt to access beyond end of device [ 67.384629][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.388419][ T5041] batadv1: entered promiscuous mode [ 67.403780][ T5028] syz.1.530: attempt to access beyond end of device [ 67.403780][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.409062][ T5041] batadv1: entered allmulticast mode [ 67.427605][ T5028] syz.1.530: attempt to access beyond end of device [ 67.427605][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.442017][ T5028] syz.1.530: attempt to access beyond end of device [ 67.442017][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.451435][ T5048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.533'. [ 67.466350][ T5028] syz.1.530: attempt to access beyond end of device [ 67.466350][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.482997][ T5028] syz.1.530: attempt to access beyond end of device [ 67.482997][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.497559][ T5048] batadv1: entered promiscuous mode [ 67.497617][ T5028] syz.1.530: attempt to access beyond end of device [ 67.497617][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.502878][ T5048] batadv1: entered allmulticast mode [ 67.518038][ T5028] syz.1.530: attempt to access beyond end of device [ 67.518038][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.534423][ T5028] syz.1.530: attempt to access beyond end of device [ 67.534423][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.548196][ T5028] syz.1.530: attempt to access beyond end of device [ 67.548196][ T5028] loop1: rw=0, sector=185, nr_sectors = 8 limit=128 [ 67.701587][ T5058] netlink: 'syz.0.543': attribute type 4 has an invalid length. [ 67.714250][ T5058] netlink: 'syz.0.543': attribute type 4 has an invalid length. [ 67.792240][ T5065] xt_hashlimit: size too large, truncated to 1048576 [ 68.009015][ T5075] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 68.035350][ T5078] pim6reg: entered allmulticast mode [ 68.042747][ T5078] pim6reg: left allmulticast mode [ 68.100968][ T5082] loop1: detected capacity change from 0 to 128 [ 68.107359][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 68.107372][ T29] audit: type=1400 audit(1749971807.690:2321): avc: denied { read } for pid=5083 comm="syz.2.551" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.109596][ T5084] loop2: detected capacity change from 0 to 1024 [ 68.113625][ T29] audit: type=1400 audit(1749971807.690:2322): avc: denied { open } for pid=5083 comm="syz.2.551" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.138343][ T5084] EXT4-fs: Ignoring removed bh option [ 68.143379][ T5082] EXT4-fs: Ignoring removed nobh option [ 68.167874][ T5084] EXT4-fs: inline encryption not supported [ 68.184593][ T5084] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.195719][ T5082] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.208929][ T5084] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 68.209500][ T5082] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.228012][ T5084] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.551: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.250177][ T5084] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 68.259525][ T5084] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.551: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.274223][ T5084] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 68.283064][ T5084] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.551: Failed to acquire dquot type 0 [ 68.295426][ T5084] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 68.308943][ T5084] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.551: mark_inode_dirty error [ 68.320702][ T5084] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.331389][ T5084] EXT4-fs (loop2): 1 orphan inode deleted [ 68.345046][ T5084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.358675][ T3640] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.377897][ T29] audit: type=1400 audit(1749971807.970:2323): avc: denied { mount } for pid=5091 comm="syz.0.554" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.382826][ T5092] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.554'. [ 68.402657][ T29] audit: type=1400 audit(1749971807.970:2324): avc: denied { map } for pid=5091 comm="syz.0.554" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.412951][ T5093] loop3: detected capacity change from 0 to 512 [ 68.432370][ T29] audit: type=1400 audit(1749971807.970:2325): avc: denied { read } for pid=5091 comm="syz.0.554" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.434254][ T3640] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 68.470573][ T3640] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 68.482804][ T5093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.496867][ T5084] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.506950][ T5093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.520790][ T5093] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.533218][ T5093] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 68.566213][ T29] audit: type=1400 audit(1749971808.120:2326): avc: denied { remove_name } for pid=5090 comm="syz.3.553" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.588904][ T29] audit: type=1400 audit(1749971808.120:2327): avc: denied { unlink } for pid=5090 comm="syz.3.553" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.617903][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.630161][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.657907][ T5104] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 68.669161][ T5104] team0: Port device dummy0 added [ 68.680029][ T5104] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 68.688947][ T5104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.703432][ T5104] team0: Failed to send options change via netlink (err -105) [ 68.737617][ T5104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.768128][ T5104] team0: Port device dummy0 removed [ 68.809168][ T5104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.853519][ T5105] lo speed is unknown, defaulting to 1000 [ 69.091378][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.300148][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 69.309196][ T5114] bridge_slave_1: left allmulticast mode [ 69.314913][ T5114] bridge_slave_1: left promiscuous mode [ 69.320605][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.377602][ T5114] bridge_slave_0: left promiscuous mode [ 69.383366][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.477199][ T5126] lo speed is unknown, defaulting to 1000 [ 69.680118][ T5136] hsr_slave_1 (unregistering): left promiscuous mode [ 69.804636][ T5140] loop3: detected capacity change from 0 to 512 [ 69.814220][ T5140] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.571: corrupted in-inode xattr: invalid ea_ino [ 69.827720][ T5140] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 69.841729][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.888656][ T5140] Invalid ELF header magic: != ELF [ 69.921602][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.133401][ T5148] loop3: detected capacity change from 0 to 2048 [ 70.215229][ T5148] EXT4-fs (loop3): failed to initialize system zone (-117) [ 70.222591][ T5148] EXT4-fs (loop3): mount failed [ 70.358645][ T5160] loop4: detected capacity change from 0 to 512 [ 70.387399][ T5160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.418417][ T5160] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.481084][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.542119][ T36] IPVS: starting estimator thread 0... [ 70.582417][ T5172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.634526][ T5170] IPVS: using max 2784 ests per chain, 139200 per kthread [ 71.488921][ T5192] $H: renamed from bond0 (while UP) [ 71.496462][ T5192] $H: entered promiscuous mode [ 71.519384][ T5196] loop4: detected capacity change from 0 to 1024 [ 71.536412][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.548742][ T5196] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.567919][ T5196] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.589: lblock 3 mapped to illegal pblock 3 (length 13) [ 71.582100][ T5196] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 71.594548][ T5196] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.594548][ T5196] [ 71.618028][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.680194][ T5208] __nla_validate_parse: 1 callbacks suppressed [ 71.680206][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 71.701444][ T5208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.717006][ T5208] veth1: entered promiscuous mode [ 71.724348][ T5208] bond3: (slave veth1): Enslaving as an active interface with an up link [ 71.738952][ T5208] vlan0: entered allmulticast mode [ 71.744169][ T5208] bond3: entered allmulticast mode [ 71.749392][ T5208] veth1: entered allmulticast mode [ 71.902954][ T5219] tls_set_device_offload: netdev not found [ 72.043245][ T36] IPVS: starting estimator thread 0... [ 72.068168][ T5233] loop1: detected capacity change from 0 to 1024 [ 72.075041][ T5233] EXT4-fs: inline encryption not supported [ 72.081090][ T5233] EXT4-fs: Ignoring removed bh option [ 72.096740][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.143544][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.152888][ T5231] IPVS: using max 2400 ests per chain, 120000 per kthread [ 72.251352][ T5246] loop1: detected capacity change from 0 to 1024 [ 72.265957][ T5246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.288477][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.305390][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 72.318830][ T5250] loop1: detected capacity change from 0 to 1024 [ 72.329535][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.760829][ T5259] ================================================================== [ 72.768946][ T5259] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 72.776977][ T5259] [ 72.779306][ T5259] write to 0xffff888106bee9a4 of 4 bytes by task 5250 on cpu 1: [ 72.786943][ T5259] xas_set_mark+0x12b/0x140 [ 72.791476][ T5259] tag_pages_for_writeback+0xc2/0x290 [ 72.796867][ T5259] ext4_do_writepages+0x697/0x21c0 [ 72.802008][ T5259] ext4_writepages+0x176/0x300 [ 72.806794][ T5259] do_writepages+0x1c6/0x310 [ 72.811411][ T5259] filemap_write_and_wait_range+0x144/0x340 [ 72.817340][ T5259] filemap_invalidate_pages+0xa4/0x1a0 [ 72.822835][ T5259] kiocb_invalidate_pages+0x6e/0x80 [ 72.828064][ T5259] __iomap_dio_rw+0x5d4/0x1250 [ 72.832869][ T5259] iomap_dio_rw+0x40/0x90 [ 72.837223][ T5259] ext4_file_write_iter+0xad9/0xf00 [ 72.842435][ T5259] iter_file_splice_write+0x5ef/0x970 [ 72.847847][ T5259] direct_splice_actor+0x153/0x2a0 [ 72.852992][ T5259] splice_direct_to_actor+0x30f/0x680 [ 72.858405][ T5259] do_splice_direct+0xda/0x150 [ 72.863209][ T5259] do_sendfile+0x380/0x650 [ 72.867633][ T5259] __x64_sys_sendfile64+0x105/0x150 [ 72.872838][ T5259] x64_sys_call+0xb39/0x2fb0 [ 72.877447][ T5259] do_syscall_64+0xd2/0x200 [ 72.881969][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.887881][ T5259] [ 72.890220][ T5259] read to 0xffff888106bee9a4 of 4 bytes by task 5259 on cpu 0: [ 72.897788][ T5259] file_write_and_wait_range+0x10e/0x2c0 [ 72.903475][ T5259] generic_buffers_fsync_noflush+0x45/0x120 [ 72.909396][ T5259] ext4_sync_file+0x1ab/0x690 [ 72.914087][ T5259] vfs_fsync_range+0x10a/0x130 [ 72.918864][ T5259] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.924446][ T5259] ext4_file_write_iter+0xdbf/0xf00 [ 72.929666][ T5259] iter_file_splice_write+0x5ef/0x970 [ 72.935071][ T5259] direct_splice_actor+0x153/0x2a0 [ 72.940202][ T5259] splice_direct_to_actor+0x30f/0x680 [ 72.945615][ T5259] do_splice_direct+0xda/0x150 [ 72.950413][ T5259] do_sendfile+0x380/0x650 [ 72.954851][ T5259] __x64_sys_sendfile64+0x105/0x150 [ 72.960064][ T5259] x64_sys_call+0xb39/0x2fb0 [ 72.964673][ T5259] do_syscall_64+0xd2/0x200 [ 72.969186][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.975102][ T5259] [ 72.977427][ T5259] value changed: 0x02000021 -> 0x04000021 [ 72.983141][ T5259] [ 72.985467][ T5259] Reported by Kernel Concurrency Sanitizer on: [ 72.991653][ T5259] CPU: 0 UID: 0 PID: 5259 Comm: syz.1.611 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 73.003994][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.014064][ T5259] ================================================================== [ 73.222291][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.