last executing test programs: 53.337964699s ago: executing program 2 (id=3583): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setns(r1, 0x24020000) 53.244459307s ago: executing program 2 (id=3594): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) 49.685139004s ago: executing program 2 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 49.621346169s ago: executing program 2 (id=3591): socket(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) 49.543307825s ago: executing program 2 (id=3596): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 48.763366338s ago: executing program 2 (id=3613): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) 32.24677665s ago: executing program 32 (id=3613): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) 14.183282527s ago: executing program 0 (id=4236): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7ef80}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12) 14.126698321s ago: executing program 0 (id=4247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) 14.105205133s ago: executing program 0 (id=4239): unshare(0x62040200) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) unshare(0x40080) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x2, 0x1800}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 14.043372428s ago: executing program 0 (id=4241): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) rename(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='./file1\x00') 13.799529188s ago: executing program 0 (id=4248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 13.179217458s ago: executing program 0 (id=4262): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f380068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 13.179102897s ago: executing program 33 (id=4262): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3.513710397s ago: executing program 4 (id=4573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 3.491352229s ago: executing program 4 (id=4575): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) close(r0) 3.47449084s ago: executing program 4 (id=4576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.444962462s ago: executing program 4 (id=4577): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 3.292669575s ago: executing program 4 (id=4581): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.568235483s ago: executing program 4 (id=4599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x4000000a, 0x0) 2.568135634s ago: executing program 34 (id=4599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x4000000a, 0x0) 1.060204804s ago: executing program 3 (id=4643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 983.484131ms ago: executing program 3 (id=4644): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3620cf457227867ec114c2bc6ce40aa275cd5101c3ef33a80180afbbe8058fec7fbbc0b6a0f1ced5c27c3d21c69c4e6ec392f87b74c2b3212b45f6ab6b25a323b59c8fafe9", 0x45}], 0x1}}], 0x1, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 965.503012ms ago: executing program 5 (id=4646): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x18, 0x800, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xfff9}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 892.742638ms ago: executing program 3 (id=4647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 833.907653ms ago: executing program 3 (id=4649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 688.454764ms ago: executing program 3 (id=4653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 668.222016ms ago: executing program 5 (id=4663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 642.913428ms ago: executing program 3 (id=4657): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1832b, 0x0) 493.55356ms ago: executing program 5 (id=4659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 445.771654ms ago: executing program 5 (id=4662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 422.999196ms ago: executing program 6 (id=4664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) 356.195181ms ago: executing program 6 (id=4667): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff", @ANYRESOCT], 0xd) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 344.845442ms ago: executing program 1 (id=4668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 330.771914ms ago: executing program 5 (id=4670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 301.030766ms ago: executing program 5 (id=4671): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 300.467876ms ago: executing program 1 (id=4672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 279.204128ms ago: executing program 1 (id=4673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 277.289658ms ago: executing program 6 (id=4674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 197.595384ms ago: executing program 6 (id=4675): unshare(0x26020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x5000000, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 147.487088ms ago: executing program 1 (id=4676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 139.186579ms ago: executing program 6 (id=4677): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0) 125.39166ms ago: executing program 1 (id=4678): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 73.161114ms ago: executing program 1 (id=4679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 0s ago: executing program 6 (id=4680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): nd0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.612697][T10477] bond0 (unregistering): Released all slaves [ 149.621829][T10477] bond1 (unregistering): Released all slaves [ 149.630975][T10477] bond2 (unregistering): Released all slaves [ 149.686691][T10477] hsr_slave_0: left promiscuous mode [ 149.692482][T10477] hsr_slave_1: left promiscuous mode [ 149.700565][T10477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.707997][T10477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.716758][T10477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.724249][T10477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.755895][T10477] veth1_macvtap: left promiscuous mode [ 149.761501][T10477] veth0_macvtap: left promiscuous mode [ 149.767562][T10477] veth1_vlan: left promiscuous mode [ 149.776060][T10477] veth0_vlan: left promiscuous mode [ 149.875404][T10477] team0 (unregistering): Port device team_slave_1 removed [ 149.885644][T10477] team0 (unregistering): Port device team_slave_0 removed [ 150.015022][T18765] chnl_net:caif_netlink_parms(): no params data found [ 150.083578][T18765] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.090737][T18765] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.103964][T18765] bridge_slave_0: entered allmulticast mode [ 150.110555][T18765] bridge_slave_0: entered promiscuous mode [ 150.119005][T18765] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.126142][T18765] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.133943][T18765] bridge_slave_1: entered allmulticast mode [ 150.142478][T18765] bridge_slave_1: entered promiscuous mode [ 150.171700][T18765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.183350][T10477] IPVS: stop unused estimator thread 0... [ 150.191858][T18765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.219587][T18765] team0: Port device team_slave_0 added [ 150.226560][T18765] team0: Port device team_slave_1 added [ 150.242246][T18765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.249262][T18765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.275298][T18765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.286501][T18765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.293444][T18765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.319371][T18765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.356193][T18765] hsr_slave_0: entered promiscuous mode [ 150.364556][T18765] hsr_slave_1: entered promiscuous mode [ 150.431883][T18794] loop3: detected capacity change from 0 to 8192 [ 150.472664][T18794] loop3: p1 p2 p3 p4 [ 150.477315][T18794] loop3: p2 start 151000334 is beyond EOD, truncated [ 150.484122][T18794] loop3: p3 start 331777 is beyond EOD, truncated [ 150.490613][T18794] loop3: p4 size 263168 extends beyond EOD, truncated [ 150.638132][T18765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.656922][T18765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.676772][T18765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.696998][T18765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.763898][T18765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.787329][T18765] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.805245][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.812404][ T6603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.831399][T17410] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.838481][T17410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.860291][T18765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.870746][T18765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.953059][T18765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.060249][T18765] veth0_vlan: entered promiscuous mode [ 151.070597][T18765] veth1_vlan: entered promiscuous mode [ 151.099997][T18765] veth0_macvtap: entered promiscuous mode [ 151.107987][T18765] veth1_macvtap: entered promiscuous mode [ 151.129638][T18765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.142693][T18765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.155243][T11494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.168619][T11494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.180673][T11494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.191358][T11494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.272275][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 151.293594][T18819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'. [ 151.364497][T18817] bond0: (slave bond_slave_1): Releasing backup interface [ 152.064399][T18844] chnl_net:caif_netlink_parms(): no params data found [ 152.170420][T18844] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.177599][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.211620][T18844] bridge_slave_0: entered allmulticast mode [ 152.229053][T18844] bridge_slave_0: entered promiscuous mode [ 152.247209][T18844] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.254335][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.278667][T18844] bridge_slave_1: entered allmulticast mode [ 152.288561][T18844] bridge_slave_1: entered promiscuous mode [ 152.681802][T18844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.713742][T18844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.739590][T18844] team0: Port device team_slave_0 added [ 152.746237][T18844] team0: Port device team_slave_1 added [ 152.763653][T18844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.770737][T18844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.796774][T18844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.808751][T18844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.815702][T18844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.841644][T18844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.875496][T18844] hsr_slave_0: entered promiscuous mode [ 152.881634][T18844] hsr_slave_1: entered promiscuous mode [ 152.890194][T18844] debugfs: 'hsr0' already exists in 'hsr' [ 152.896060][T18844] Cannot create hsr debugfs directory [ 152.917584][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 153.001119][T18866] bond0: (slave bond_slave_1): Releasing backup interface [ 153.122308][T18844] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.194593][T18844] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.274699][T18883] loop3: detected capacity change from 0 to 512 [ 153.281922][T18883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.301651][T18844] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.302273][T18883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.334166][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.365419][T18844] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.407436][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 153.407450][ T29] audit: type=1326 audit(146.292:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a90ebe9 code=0x7fc00000 [ 153.462426][T18895] SELinux: failed to load policy [ 153.468244][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 153.468617][T18844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.497712][T18844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.508813][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 153.518829][T18844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.532320][T18844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.551230][T18906] macvtap0: refused to change device tx_queue_len [ 153.559294][T18905] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.613961][T18844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.630442][T18844] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.647863][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.655060][T17693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.667208][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.674298][T17693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.687112][T18926] loop3: detected capacity change from 0 to 512 [ 153.701674][T18926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.716611][ T29] audit: type=1400 audit(146.582:5388): avc: denied { setattr } for pid=18925 comm="syz.3.3247" path="/164/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.771948][T18934] program syz.4.3248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.789788][T18935] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 153.804531][T18935] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1549 with error 28 [ 153.806729][T18844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.817021][T18935] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.817021][T18935] [ 153.817036][T18935] EXT4-fs (loop3): Total free blocks count 0 [ 153.817049][T18935] EXT4-fs (loop3): Free/Dirty block details [ 153.817059][T18935] EXT4-fs (loop3): free_blocks=65280 [ 153.850735][T18935] EXT4-fs (loop3): dirty_blocks=1551 [ 153.856102][T18935] EXT4-fs (loop3): Block reservation details [ 153.862136][T18935] EXT4-fs (loop3): i_reserved_data_blocks=1551 [ 153.920301][ T29] audit: type=1400 audit(146.760:5389): avc: denied { create } for pid=18942 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 153.957981][ T29] audit: type=1400 audit(146.778:5390): avc: denied { sys_admin } for pid=18942 comm="syz.4.3250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 153.999992][T18844] veth0_vlan: entered promiscuous mode [ 154.034874][T18844] veth1_vlan: entered promiscuous mode [ 154.068052][T18844] veth0_macvtap: entered promiscuous mode [ 154.079319][T18844] veth1_macvtap: entered promiscuous mode [ 154.096539][T18844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.110157][T18844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.122085][ T8532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.138930][ T8532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.152307][ T8532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.153035][T18926] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1550 with max blocks 2048 with error 28 [ 154.163324][ T29] audit: type=1326 audit(147.003:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a90ebe9 code=0x7fc00000 [ 154.248364][ T6603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.278783][ T29] audit: type=1400 audit(147.106:5392): avc: denied { accept } for pid=18958 comm="syz.2.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.398953][T18967] loop3: detected capacity change from 0 to 164 [ 154.414633][ T29] audit: type=1400 audit(147.227:5393): avc: denied { mount } for pid=18966 comm="syz.3.3254" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 154.445463][ T29] audit: type=1400 audit(147.265:5394): avc: denied { cpu } for pid=18968 comm="syz.0.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.468153][T18967] syz.3.3254: attempt to access beyond end of device [ 154.468153][T18967] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 154.494598][T18967] syz.3.3254: attempt to access beyond end of device [ 154.494598][T18967] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.545177][ T29] audit: type=1400 audit(147.358:5395): avc: denied { unmount } for pid=13098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 154.586239][ T29] audit: type=1400 audit(147.377:5396): avc: denied { create } for pid=18973 comm="syz.4.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.639123][T18986] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.648435][T18986] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.672424][T18985] loop4: detected capacity change from 0 to 512 [ 154.706474][T18985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.742140][T18985] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3268: corrupted inode contents [ 154.782035][T19004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3275'. [ 154.809891][T18985] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3268: mark_inode_dirty error [ 154.835171][T18985] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3268: corrupted inode contents [ 154.890033][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.992284][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3287'. [ 155.084918][T19041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3292'. [ 155.233716][T19064] loop0: detected capacity change from 0 to 512 [ 155.247635][T19064] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3303: iget: bad i_size value: 38620345925642 [ 155.266136][T19064] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3303: couldn't read orphan inode 15 (err -117) [ 155.278158][T19066] loop4: detected capacity change from 0 to 1024 [ 155.286487][T19064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.299239][T19072] loop2: detected capacity change from 0 to 512 [ 155.307259][T19072] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.314435][T19066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.329115][T19066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3304: missing EA_INODE flag [ 155.329664][T18844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.344243][T19072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.352113][T19066] EXT4-fs (loop4): Remounting filesystem read-only [ 155.380382][T18765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.392508][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.419021][T19082] loop4: detected capacity change from 0 to 512 [ 155.431217][T19082] EXT4-fs (loop4): too many log groups per flexible block group [ 155.439076][T19082] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 155.439490][T19084] loop0: detected capacity change from 0 to 512 [ 155.446254][T19082] EXT4-fs (loop4): mount failed [ 155.454486][T19084] EXT4-fs: Ignoring removed oldalloc option [ 155.463715][T19084] EXT4-fs: Ignoring removed bh option [ 155.508935][T19084] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3310: corrupted in-inode xattr: e_value size too large [ 155.527936][T19084] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3310: couldn't read orphan inode 15 (err -117) [ 155.544389][T19084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.579514][T19093] loop4: detected capacity change from 0 to 8192 [ 155.592274][T18844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.789401][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 155.798577][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 155.955884][T19137] netlink: 'syz.0.3333': attribute type 4 has an invalid length. [ 155.995293][T19137] netlink: 'syz.0.3333': attribute type 4 has an invalid length. [ 156.173265][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'. [ 156.183588][T19155] bridge_slave_1: left allmulticast mode [ 156.189307][T19155] bridge_slave_1: left promiscuous mode [ 156.195175][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.203541][T19155] bridge_slave_0: left allmulticast mode [ 156.203649][T19159] atomic_op ffff88810ea50528 conn xmit_atomic 0000000000000000 [ 156.209250][T19155] bridge_slave_0: left promiscuous mode [ 156.209454][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.370942][ T8532] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 156.430304][T19180] loop3: detected capacity change from 0 to 1024 [ 156.437324][T19180] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.448296][T19180] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.458990][T19180] JBD2: no valid journal superblock found [ 156.464852][T19180] EXT4-fs (loop3): Could not load journal inode [ 156.489055][T19183] lo speed is unknown, defaulting to 1000 [ 156.494898][T19183] lo speed is unknown, defaulting to 1000 [ 156.502199][T19183] lo speed is unknown, defaulting to 1000 [ 156.508431][T19183] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.516064][T19183] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.527949][T19183] lo speed is unknown, defaulting to 1000 [ 156.533968][T19183] lo speed is unknown, defaulting to 1000 [ 156.542127][T19183] lo speed is unknown, defaulting to 1000 [ 156.548154][T19183] lo speed is unknown, defaulting to 1000 [ 156.554323][T19183] lo speed is unknown, defaulting to 1000 [ 156.560422][T19183] lo speed is unknown, defaulting to 1000 [ 156.709474][T19189] loop3: detected capacity change from 0 to 512 [ 156.718609][T19189] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3355: error while reading EA inode 32 err=-116 [ 156.732536][T19189] EXT4-fs (loop3): Remounting filesystem read-only [ 156.739216][T19189] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 156.749640][T19189] EXT4-fs (loop3): 1 orphan inode deleted [ 156.755865][T19189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.778716][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.893747][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810c688600: rx timeout, send abort [ 156.901985][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810c689e00: rx timeout, send abort [ 156.910276][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810c688600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.924601][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810c689e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.325208][T19221] netlink: 'syz.4.3368': attribute type 21 has an invalid length. [ 157.344974][T19221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3368'. [ 157.354080][T19221] netlink: 'syz.4.3368': attribute type 1 has an invalid length. [ 157.594649][T19253] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3381'. [ 157.661138][T19264] loop4: detected capacity change from 0 to 512 [ 157.668648][T19264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.683718][T19264] EXT4-fs (loop4): 1 truncate cleaned up [ 157.705131][T19264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.753041][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.767021][T19271] loop3: detected capacity change from 0 to 512 [ 157.779917][T19271] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3392: casefold flag without casefold feature [ 157.794363][T19271] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3392: couldn't read orphan inode 15 (err -117) [ 157.807185][T19271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.900128][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.930576][T19276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.028100][T19276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.119980][T19276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.179486][T19276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.249871][T18224] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.269878][T18224] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.286359][ T8532] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.299213][ T8532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.380983][T19331] loop4: detected capacity change from 0 to 512 [ 158.412318][T19331] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 158.422888][T19331] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.436327][T19331] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3418: corrupted inode contents [ 158.448809][T19331] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.3418: mark_inode_dirty error [ 158.461045][T19331] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3418: corrupted inode contents [ 158.484615][T19331] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3418: mark_inode_dirty error [ 158.501742][T19331] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3418: corrupted inode contents [ 158.518805][T19331] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 158.535768][T19331] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3418: corrupted inode contents [ 158.550031][T19331] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.3418: mark_inode_dirty error [ 158.562120][T19331] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 158.575555][T19331] EXT4-fs (loop4): 1 truncate cleaned up [ 158.581913][T17693] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:339: Failed to release dquot type 1 [ 158.606467][T19331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.644948][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.679445][T19357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.689923][T19357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.740337][T19366] futex_wake_op: syz.4.3433 tries to shift op by 144; fix this program [ 158.767325][T19357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.777743][T19357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.828322][T19368] __nla_validate_parse: 2 callbacks suppressed [ 158.828341][T19368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3434'. [ 158.861916][T19374] program syz.0.3438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.893477][T19357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.903855][T19357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.908339][T19373] SELinux: failed to load policy [ 158.914512][T19374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 158.929895][T19376] loop4: detected capacity change from 0 to 128 [ 158.941538][T19376] syz.4.3439: attempt to access beyond end of device [ 158.941538][T19376] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 158.957091][T19376] syz.4.3439: attempt to access beyond end of device [ 158.957091][T19376] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 158.970681][T19376] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 158.979823][T19376] syz.4.3439: attempt to access beyond end of device [ 158.979823][T19376] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 158.993331][T19376] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 159.021617][T19357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.032084][T19357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.058905][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 159.058971][ T29] audit: type=1326 audit(151.577:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 159.088301][ T29] audit: type=1326 audit(151.577:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 159.091184][T19376] syz.4.3439: attempt to access beyond end of device [ 159.091184][T19376] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 159.111281][ T29] audit: type=1326 audit(151.577:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19382 comm="syz.0.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 159.147943][T19376] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 159.163258][T19376] syz.4.3439: attempt to access beyond end of device [ 159.163258][T19376] loop4: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 159.178766][ T29] audit: type=1326 audit(151.689:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.3.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 159.202038][ T29] audit: type=1326 audit(151.689:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.3.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 159.226573][ T6603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.234808][ T6603] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.247021][ T6603] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.255256][ T6603] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.266761][T19375] syz.4.3439: attempt to access beyond end of device [ 159.266761][T19375] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 159.280276][T19375] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 159.293014][ T6603] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.301346][ T6603] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.310128][ T6603] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.318325][ T6603] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.326802][ T29] audit: type=1326 audit(151.745:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.3.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 159.349760][ T29] audit: type=1326 audit(151.745:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.3.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 159.372847][ T29] audit: type=1326 audit(151.745:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19384 comm="syz.3.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 159.395905][ T29] audit: type=1400 audit(151.811:5528): avc: denied { write } for pid=19392 comm="syz.0.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.436217][ T29] audit: type=1400 audit(151.923:5529): avc: denied { audit_write } for pid=19394 comm="syz.1.3447" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.499540][T19404] SELinux: failed to load policy [ 159.731084][T19422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.786303][T19422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.855270][T19422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.916075][T19422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.966953][ T6603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.978504][ T6603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.991684][ T8532] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.002447][ T8532] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.547100][T19436] SELinux: failed to load policy [ 160.592935][T19446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.603327][T19446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.648729][T19446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.659127][T19446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.776509][T19446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.786969][T19446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.862298][T19446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.873136][T19446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.890026][T19468] loop3: detected capacity change from 0 to 4096 [ 160.903809][T19468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.938513][ T6603] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.946787][ T6603] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.979555][ T6603] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.987910][ T6603] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.996455][ T6603] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.004720][ T6603] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.014560][ T6603] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.022888][ T6603] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.037058][T19488] SELinux: failed to load policy [ 161.047708][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.104463][T19497] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3488'. [ 161.120952][T19499] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.130811][T19499] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.191523][T19499] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.201502][T19499] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.267815][T19499] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.277641][T19499] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.351846][T19499] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.361753][T19499] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.235192][T19544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3514'. [ 162.341015][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.350016][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.364973][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.388132][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.397045][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.413748][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.472066][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 162.559402][T19580] SELinux: failed to load policy [ 163.055599][ T8532] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.064019][ T8532] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.075642][ T8532] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.083939][ T8532] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.096115][ T8532] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.104397][ T8532] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.116027][ T8532] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.124256][ T8532] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.209135][T19604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.265680][T19604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.330470][T19604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.383473][T19604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.459427][ T6603] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.481188][ T8532] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.494198][ T8532] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.510190][ T8532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.656674][T19645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19645 comm=syz.3.3557 [ 163.718153][T19651] netlink: 'syz.3.3562': attribute type 3 has an invalid length. [ 163.763636][T19655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.774015][T19655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.864789][T19655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.875151][T19655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.951203][T19655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.961546][T19655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.026887][T19655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.037361][T19655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.082956][ T6603] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.091215][ T6603] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.102689][ T6603] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.111005][ T6603] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.122395][ T6603] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.130706][ T6603] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.141367][ T6603] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.149593][ T6603] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.351064][T19670] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.364415][T19672] __nla_validate_parse: 14 callbacks suppressed [ 164.364432][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 164.382138][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 164.431312][T19670] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.496406][T19670] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.539107][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 164.539125][ T29] audit: type=1400 audit(156.703:5719): avc: denied { wake_alarm } for pid=19685 comm="syz.0.3574" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.568552][T19670] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.582389][ T29] audit: type=1326 audit(156.703:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.605554][ T29] audit: type=1326 audit(156.703:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.628595][ T29] audit: type=1326 audit(156.703:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.649413][T19690] netlink: 'syz.0.3577': attribute type 3 has an invalid length. [ 164.651574][ T29] audit: type=1326 audit(156.703:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.682339][ T29] audit: type=1326 audit(156.703:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.705667][ T29] audit: type=1326 audit(156.703:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.728630][ T29] audit: type=1326 audit(156.703:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.751846][ T29] audit: type=1326 audit(156.703:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.0.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 164.774914][ T29] audit: type=1326 audit(156.731:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19684 comm="syz.4.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd384ebe9 code=0x7ffc0000 [ 164.829350][ T6603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.843029][ T6603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.861115][ T6603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.886584][ T6603] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.008204][T19703] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.072511][T19703] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.178892][T19703] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.232668][T19703] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.507532][ T6603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.518829][ T6603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.529932][ T6603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.541135][ T6603] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.645928][T19723] netlink: 'syz.2.3591': attribute type 3 has an invalid length. [ 169.056306][T19775] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.066253][T19775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.178581][T19775] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.188484][T19775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.242235][T19775] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.252090][T19775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.307997][T19775] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.317806][T19775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.364478][ T8532] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.372790][ T8532] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.394962][ T8532] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.403243][ T8532] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.438019][ T8532] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.446285][ T8532] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.454988][ T8532] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.463354][ T8532] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.510867][T19830] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.698992][T19830] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.221988][T19830] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.551339][T20661] loop4: detected capacity change from 0 to 1024 [ 182.591942][T19830] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.564626][T20661] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 185.575633][T20661] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 185.818779][T20661] JBD2: no valid journal superblock found [ 185.824684][T20661] EXT4-fs (loop4): Could not load journal inode [ 186.168158][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 186.168174][ T29] audit: type=1400 audit(176.936:5780): avc: denied { ioctl } for pid=23803 comm="syz.0.3610" path="socket:[45971]" dev="sockfs" ino=45971 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.278514][T23811] loop3: detected capacity change from 0 to 512 [ 186.298006][ T8] bridge_slave_1: left allmulticast mode [ 186.303797][ T8] bridge_slave_1: left promiscuous mode [ 186.309543][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.318982][ T8] bridge_slave_0: left promiscuous mode [ 186.324839][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.370008][ T29] audit: type=1400 audit(177.113:5781): avc: denied { mounton } for pid=23814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 186.370233][T23811] EXT4-fs (loop3): too many log groups per flexible block group [ 186.398942][T23811] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 186.424828][T23811] EXT4-fs (loop3): mount failed [ 186.477442][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.494963][ T8] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 186.507251][ T8] bond0 (unregistering): Released all slaves [ 186.523443][T23820] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.557128][T23825] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.573793][T15930] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.582250][ T8] tipc: Left network mode [ 186.632636][ T8] hsr_slave_0: left promiscuous mode [ 186.638428][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.647867][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.663211][ T29] audit: type=1326 audit(177.394:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 186.686371][ T29] audit: type=1326 audit(177.394:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 186.720596][ T29] audit: type=1326 audit(177.422:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 186.743693][ T29] audit: type=1326 audit(177.422:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 186.766714][ T29] audit: type=1326 audit(177.422:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23830 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 186.812847][ T8] team0 (unregistering): Port device team_slave_1 removed [ 186.826467][ T8] team0 (unregistering): Port device team_slave_0 removed [ 186.842974][ T29] audit: type=1326 audit(177.544:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23843 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 186.866225][ T29] audit: type=1326 audit(177.544:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23843 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 186.889166][ T29] audit: type=1326 audit(177.562:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23843 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 186.954194][T15930] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.976033][T23836] bond1: entered promiscuous mode [ 186.981121][T23836] bond1: entered allmulticast mode [ 187.000684][T23836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.014378][T23836] bond1 (unregistering): Released all slaves [ 187.088782][T23842] dummy0: left promiscuous mode [ 187.096344][T23842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.136644][T15930] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.158753][T15930] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.193332][T23814] lo speed is unknown, defaulting to 1000 [ 187.362960][T23814] chnl_net:caif_netlink_parms(): no params data found [ 187.369915][T23858] hub 6-0:1.0: USB hub found [ 187.382212][T23858] hub 6-0:1.0: 8 ports detected [ 187.392254][ T8] IPVS: stop unused estimator thread 0... [ 187.496909][T23867] 9pnet: p9_errstr2errno: server reported unknown error Ȫjn× [ 187.496909][T23867] €2×$•tO*ô®¸¸m¿Õ¿*ýÇ…‹å—j`càˆ?ÚŠ#t>r®èÉ) [ 187.568503][T23814] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.575694][T23814] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.582943][T23814] bridge_slave_0: entered allmulticast mode [ 187.592717][T23814] bridge_slave_0: entered promiscuous mode [ 187.615735][T23814] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.623068][T23814] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.632603][T23873] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3633'. [ 187.641850][T23814] bridge_slave_1: entered allmulticast mode [ 187.651007][T23814] bridge_slave_1: entered promiscuous mode [ 187.706111][T23814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.738911][T23814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.752425][T23891] netlink: 'syz.3.3643': attribute type 21 has an invalid length. [ 187.762020][T23891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3643'. [ 187.771145][T23891] netlink: 'syz.3.3643': attribute type 1 has an invalid length. [ 187.833541][T23814] team0: Port device team_slave_0 added [ 187.840264][T23814] team0: Port device team_slave_1 added [ 187.866123][T23814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.873332][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.899437][T23814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.918718][T23814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.925731][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.951797][T23814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.990358][T23814] hsr_slave_0: entered promiscuous mode [ 187.998982][T23814] hsr_slave_1: entered promiscuous mode [ 188.007965][T23814] debugfs: 'hsr0' already exists in 'hsr' [ 188.013840][T23814] Cannot create hsr debugfs directory [ 188.019734][T23911] netlink: 'syz.4.3652': attribute type 4 has an invalid length. [ 188.048786][T23911] netlink: 'syz.4.3652': attribute type 4 has an invalid length. [ 188.075921][T23920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 188.085351][T23920] netem: change failed [ 188.155945][T23930] loop0: detected capacity change from 0 to 512 [ 188.164601][T23930] EXT4-fs: Ignoring removed i_version option [ 188.172290][T23930] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.192794][T23814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.203542][T23930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3661: bg 0: block 131: padding at end of block bitmap is not set [ 188.220937][T23814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.229515][T23930] EXT4-fs (loop0): Remounting filesystem read-only [ 188.241688][T23814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.251812][T23930] EXT4-fs (loop0): 1 truncate cleaned up [ 188.257943][T23930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.272882][T23814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.304191][T18844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.327061][T23814] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.334173][T23814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.341618][T23814] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.348703][T23814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.381954][T23814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.394790][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.405760][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.433388][T23814] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.450302][T23966] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.461339][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.468496][T10443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.481556][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.488672][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.502784][T23964] SELinux: failed to load policy [ 188.587381][T23814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.778185][T23814] veth0_vlan: entered promiscuous mode [ 188.786879][T23814] veth1_vlan: entered promiscuous mode [ 188.815593][T23814] veth0_macvtap: entered promiscuous mode [ 188.823507][T23814] veth1_macvtap: entered promiscuous mode [ 188.873107][T23814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.894701][T23814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.931025][T23423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.944906][T23423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.968273][T23423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.981300][T23423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.113156][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 189.277067][T24061] pim6reg: entered allmulticast mode [ 189.284335][T24061] pim6reg: left allmulticast mode [ 189.336672][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3709'. [ 189.345689][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3709'. [ 189.363938][T24067] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3708'. [ 189.593021][T24087] loop5: detected capacity change from 0 to 1024 [ 189.613919][T24087] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 189.631832][T24087] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.656510][T24087] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: comm syz.5.3719: inode #100663328: comm syz.5.3719: iget: illegal inode # [ 189.681299][T24087] EXT4-fs (loop5): Remounting filesystem read-only [ 189.687881][T24087] EXT4-fs (loop5): no journal found [ 189.693227][T24087] EXT4-fs (loop5): can't get journal size [ 189.715097][T24087] EXT4-fs (loop5): failed to initialize system zone (-22) [ 189.722534][T24087] EXT4-fs (loop5): mount failed [ 189.829839][T24101] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3726'. [ 190.197529][T24120] loop4: detected capacity change from 0 to 1024 [ 190.268618][T24120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.367505][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.380202][T24139] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3741'. [ 190.389933][T24139] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 190.397940][T24139] 0ªî{X¹¦: entered allmulticast mode [ 190.414044][T24139] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 190.447218][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3743'. [ 190.571356][T10443] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.590888][T24160] netlink: 'syz.3.3751': attribute type 3 has an invalid length. [ 190.613231][T10443] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.628648][T24159] lo speed is unknown, defaulting to 1000 [ 190.676928][T10443] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.740614][T10443] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.809230][T24170] netlink: 'syz.3.3755': attribute type 3 has an invalid length. [ 190.820624][T24169] bridge0: port 3(batadv1) entered blocking state [ 190.827280][T24169] bridge0: port 3(batadv1) entered disabled state [ 190.843100][T24169] batadv1: entered allmulticast mode [ 190.849517][T24169] batadv1: entered promiscuous mode [ 190.932857][T10443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.947482][T10443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.964253][T10443] bond0 (unregistering): Released all slaves [ 191.039999][T10443] hsr_slave_0: left promiscuous mode [ 191.057814][T10443] hsr_slave_1: left promiscuous mode [ 191.074974][T10443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.082498][T10443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.106245][T10443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.113746][T10443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.129719][T24192] netlink: 'syz.1.3765': attribute type 10 has an invalid length. [ 191.145439][T10443] veth1_macvtap: left promiscuous mode [ 191.150998][T10443] veth0_macvtap: left promiscuous mode [ 191.161870][T10443] veth1_vlan: left promiscuous mode [ 191.171028][T10443] veth0_vlan: left promiscuous mode [ 191.203919][ C1] hrtimer: interrupt took 26688 ns [ 191.326204][T10443] team0 (unregistering): Port device team_slave_1 removed [ 191.346250][T10443] team0 (unregistering): Port device team_slave_0 removed [ 191.369803][T15988] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.379056][T15988] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.472696][T24218] vlan2: entered promiscuous mode [ 191.477906][T24218] gretap0: entered promiscuous mode [ 191.589003][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 191.589017][ T29] audit: type=1326 audit(182.005:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24234 comm="syz.4.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd384ebe9 code=0x7ffc0000 [ 191.633409][ T29] audit: type=1326 audit(182.034:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24234 comm="syz.4.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5bd384ebe9 code=0x7ffc0000 [ 191.656442][ T29] audit: type=1326 audit(182.034:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24234 comm="syz.4.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd384ebe9 code=0x7ffc0000 [ 191.758629][T24246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.765821][ T29] audit: type=1400 audit(182.155:5948): avc: denied { unlink } for pid=18844 comm="syz-executor" name="file0" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.765985][T24246] IPv6: NLM_F_CREATE should be set when creating new route [ 191.795188][T24246] IPv6: NLM_F_CREATE should be set when creating new route [ 191.803314][T24246] ------------[ cut here ]------------ [ 191.808855][T24246] WARNING: CPU: 1 PID: 24246 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 191.819190][T24246] Modules linked in: [ 191.823107][T24246] CPU: 1 UID: 0 PID: 24246 Comm: syz.5.3788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.833132][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.843285][T24246] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 191.849059][T24246] Code: c8 12 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 33 82 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 40 c8 12 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 32 c8 12 fe e9 a5 f9 ff ff e8 28 c8 12 [ 191.860024][T24249] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 191.860024][T24249] program syz.0.3790 not setting count and/or reply_len properly [ 191.868844][T24246] RSP: 0018:ffffc90001d5f618 EFLAGS: 00010283 [ 191.892091][T24246] RAX: ffffffff83453190 RBX: 0000000000000001 RCX: 0000000000080000 [ 191.900298][T24246] RDX: ffffc9000b479000 RSI: 00000000000436df RDI: 00000000000436e0 [ 191.908379][T24246] RBP: 0000000000000001 R08: 0001c90001d5f733 R09: 0000000000000000 [ 191.916402][T24246] R10: ffff88811e592900 R11: 0000000000000002 R12: ffffc90001d5f718 [ 191.924476][T24246] R13: ffff88810f32ac00 R14: ffffc90001d5f730 R15: 0000000000000002 [ 191.932668][T24246] FS: 00007f39fadff6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 191.941671][T24246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.948317][T24246] CR2: 0000200000002000 CR3: 0000000112f18000 CR4: 00000000003506f0 [ 191.956317][T24246] Call Trace: [ 191.959647][T24246] [ 191.962604][T24246] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 191.968234][T24246] atomic_notifier_call_chain+0x76/0x1c0 [ 191.974083][T24246] call_fib_notifiers+0x65/0xa0 [ 191.978989][T24246] call_fib6_notifiers+0x30/0x40 [ 191.984047][T24246] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 191.990466][T24246] inet6_rtm_newroute+0xaf1/0x1020 [ 191.995658][T24246] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 192.001260][T24246] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 192.006235][T24246] netlink_rcv_skb+0x120/0x220 [ 192.011108][T24246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.016604][T24246] rtnetlink_rcv+0x1c/0x30 [ 192.021181][T24246] netlink_unicast+0x5c0/0x690 [ 192.026106][T24246] netlink_sendmsg+0x58b/0x6b0 [ 192.031108][T24246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.036476][T24246] __sock_sendmsg+0x142/0x180 [ 192.041317][T24246] ____sys_sendmsg+0x31e/0x4e0 [ 192.046165][T24246] ___sys_sendmsg+0x17b/0x1d0 [ 192.050878][T24246] __x64_sys_sendmsg+0xd4/0x160 [ 192.055847][T24246] x64_sys_call+0x191e/0x2ff0 [ 192.060624][T24246] do_syscall_64+0xd2/0x200 [ 192.065258][T24246] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.071418][T24246] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.077222][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.083163][T24246] RIP: 0033:0x7f39fc39ebe9 [ 192.087715][T24246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.107618][T24246] RSP: 002b:00007f39fadff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.116072][T24246] RAX: ffffffffffffffda RBX: 00007f39fc5c5fa0 RCX: 00007f39fc39ebe9 [ 192.124140][T24246] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 192.125759][T24238] loop4: detected capacity change from 0 to 32768 [ 192.132253][T24246] RBP: 00007f39fc421e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.132270][T24246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.132327][T24246] R13: 00007f39fc5c6038 R14: 00007f39fc5c5fa0 R15: 00007ffe555e5dd8 [ 192.132351][T24246] [ 192.165854][T24246] ---[ end trace 0000000000000000 ]--- [ 192.192689][ T29] audit: type=1400 audit(182.567:5949): avc: denied { cpu } for pid=24250 comm="syz.3.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 192.240037][ T29] audit: type=1400 audit(182.613:5950): avc: denied { write } for pid=24261 comm="syz.0.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.283903][T24238] loop4: p1 p3 < > [ 192.340410][ T29] audit: type=1400 audit(182.698:5951): avc: denied { map } for pid=24272 comm="syz.3.3799" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 192.498177][T24292] loop3: detected capacity change from 0 to 512 [ 192.512973][ T29] audit: type=1326 audit(182.866:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.0.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 192.535179][T24292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.536198][ T29] audit: type=1326 audit(182.866:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.0.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 192.565683][ T29] audit: type=1326 audit(182.866:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24293 comm="syz.0.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd83ac2ebe9 code=0x7ffc0000 [ 192.567951][T24292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.609516][T24292] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 192.642671][T24292] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 192.650853][T24292] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 192.674245][T24292] EXT4-fs (loop3): 1 truncate cleaned up [ 192.680298][T24292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.740760][T24292] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 192.770178][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.813370][T24296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.822696][T24296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.846949][T24324] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.861121][T24327] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 192.908351][T24324] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.953443][T24324] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.998311][T24324] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.068108][T10443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.088148][T10443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.100900][T10443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.130057][T10443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.151679][T24355] netlink: 'syz.4.3836': attribute type 1 has an invalid length. [ 193.185016][T24355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.203495][T24355] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.214510][T24355] bond1: (slave batadv1): making interface the new active one [ 193.223576][T24355] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 193.501510][T24384] lo speed is unknown, defaulting to 1000 [ 193.737550][T24389] openvswitch: netlink: Message has 6 unknown bytes. [ 193.820726][T24401] loop3: detected capacity change from 0 to 128 [ 193.858340][T24407] batman_adv: batadv0: Adding interface: ipvlan2 [ 193.864936][T24407] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.890345][T24407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.900849][T24407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.910780][T24407] batman_adv: batadv0: Interface activated: ipvlan2 [ 193.941639][T24412] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 193.953181][T24411] IPVS: stopping master sync thread 24412 ... [ 193.964502][T24414] pim6reg: entered allmulticast mode [ 193.974412][T24414] pim6reg: left allmulticast mode [ 194.329405][T24437] loop0: detected capacity change from 0 to 32768 [ 194.382403][T24459] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.392419][T24459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.399260][T24437] loop0: p1 p3 < > [ 194.460419][T24459] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.470321][T24459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.520034][T24475] netlink: 'syz.0.3891': attribute type 1 has an invalid length. [ 194.557161][T24459] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.567115][T24459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.611633][T24459] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.621473][T24459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.681500][T10443] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.690007][T10443] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.700830][T10443] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.709158][T10443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.720445][T10443] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.728715][T10443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.740103][T10443] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.748447][T10443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.154563][T24532] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 195.589291][T24567] lo speed is unknown, defaulting to 1000 [ 195.666675][T24571] netem: incorrect gi model size [ 195.671717][T24571] netem: change failed [ 195.738870][T24577] netlink: 'syz.4.3941': attribute type 4 has an invalid length. [ 195.802601][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.814869][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.988955][T24594] loop5: detected capacity change from 0 to 512 [ 195.996465][T24594] EXT4-fs: Ignoring removed i_version option [ 196.002563][T24594] EXT4-fs: Ignoring removed nobh option [ 196.015545][T24594] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 196.042844][T24603] __nla_validate_parse: 6 callbacks suppressed [ 196.042876][T24603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 196.060618][T24594] EXT4-fs (loop5): 1 truncate cleaned up [ 196.073925][T24594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.657031][T24657] openvswitch: netlink: Message has 6 unknown bytes. [ 196.681509][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 196.691797][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 196.701322][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 196.710618][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 196.740210][T24661] veth3: entered promiscuous mode [ 196.871705][T23814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.261553][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 197.261572][ T29] audit: type=1400 audit(187.319:6167): avc: denied { mount } for pid=24684 comm="syz.4.3987" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 197.290168][ T29] audit: type=1400 audit(187.319:6168): avc: denied { search } for pid=24684 comm="syz.4.3987" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.311967][ T29] audit: type=1400 audit(187.319:6169): avc: denied { search } for pid=24684 comm="syz.4.3987" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.333693][ T29] audit: type=1400 audit(187.319:6170): avc: denied { read open } for pid=24684 comm="syz.4.3987" path="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.365574][ T29] audit: type=1400 audit(187.403:6171): avc: denied { read } for pid=24679 comm="syz.1.3995" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.387947][T24689] sd 0:0:1:0: device reset [ 197.411795][T24692] lo speed is unknown, defaulting to 1000 [ 197.571129][ T29] audit: type=1326 audit(187.608:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.3.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 197.595154][ T29] audit: type=1326 audit(187.627:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.3.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 197.618146][ T29] audit: type=1326 audit(187.627:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.3.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 197.641233][ T29] audit: type=1326 audit(187.627:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.3.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b07aebe9 code=0x7ffc0000 [ 197.678206][ T29] audit: type=1326 audit(187.655:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd384ebe9 code=0x7ffc0000 [ 197.763705][T24725] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 197.773571][T24725] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 197.782711][T24725] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 197.793831][T24725] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 197.877254][T24741] netlink: 'syz.0.4015': attribute type 13 has an invalid length. [ 197.916850][T24741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.968812][T24747] loop0: detected capacity change from 0 to 512 [ 197.975770][T24747] EXT4-fs: Ignoring removed bh option [ 197.989190][T24747] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.998332][T24747] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 198.008540][ T23] lo speed is unknown, defaulting to 1000 [ 198.014341][ T23] syz0: Port: 1 Link DOWN [ 198.015136][T24747] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 198.020467][T24753] netlink: 'syz.3.4021': attribute type 13 has an invalid length. [ 198.028205][T24747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 198.046794][T24747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.083016][T24753] gretap0: refused to change device tx_queue_len [ 198.090184][T18844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.090212][T24753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.115085][ T10] lo speed is unknown, defaulting to 1000 [ 198.121057][ T10] syz0: Port: 1 Link ACTIVE [ 198.240983][T24775] SELinux: failed to load policy [ 198.301480][T24791] loop0: detected capacity change from 0 to 128 [ 198.320569][T24791] syz.0.4039: attempt to access beyond end of device [ 198.320569][T24791] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 198.357915][T24799] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4043'. [ 198.547733][T24814] loop5: detected capacity change from 0 to 164 [ 198.558066][T24814] rock: directory entry would overflow storage [ 198.564312][T24814] rock: sig=0x66, size=4, remaining=3 [ 198.583384][T24818] loop0: detected capacity change from 0 to 1024 [ 198.590387][T24818] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 198.590387][T24818] [ 198.601169][T24818] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 198.630707][T24820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.639490][T24820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.154685][T24849] SELinux: failed to load policy [ 199.254216][T24865] netlink: 'syz.4.4075': attribute type 13 has an invalid length. [ 199.298605][T24865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.323114][T24871] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 199.379475][T24879] loop4: detected capacity change from 0 to 128 [ 199.407613][T24879] syz.4.4082: attempt to access beyond end of device [ 199.407613][T24879] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 199.464561][T24887] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.473918][T24887] FAT-fs (loop1): unable to read boot sector [ 199.581732][T24903] netlink: 'syz.5.4090': attribute type 13 has an invalid length. [ 199.649161][T24903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.719757][T24919] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.729711][T24919] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.774578][T24919] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.784629][T24919] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.805833][T24929] ref_ctr_offset mismatch. inode: 0x18d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 199.849184][T24919] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.859012][T24919] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.913109][T24919] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.923009][T24919] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.951709][T24931] tun0: tun_chr_ioctl cmd 1074025675 [ 199.957150][T24931] tun0: persist disabled [ 199.994209][T10443] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.002617][T10443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.013723][T10443] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.022024][T10443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.041687][T10443] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.049961][T10443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.063967][T10443] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.072269][T10443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.103126][T24935] loop5: detected capacity change from 0 to 512 [ 200.111494][T24935] EXT4-fs: Ignoring removed bh option [ 200.117475][T24935] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.126628][T24935] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 200.137246][T24935] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 200.148081][T24935] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 200.156789][T24935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.191870][T23814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.414433][T24982] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 200.678606][T25009] openvswitch: netlink: Message has 6 unknown bytes. [ 200.700285][T25011] hsr_slave_0: left promiscuous mode [ 200.706085][T25011] hsr_slave_1: left promiscuous mode [ 201.413486][T25035] lo speed is unknown, defaulting to 1000 [ 201.427982][T25039] loop5: detected capacity change from 0 to 512 [ 201.446346][T25039] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4155: casefold flag without casefold feature [ 201.462142][T25039] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4155: couldn't read orphan inode 15 (err -117) [ 201.474973][T25039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.507414][T23814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.553164][T25051] 9pnet: Could not find request transport: 0xffffffffffffffff [ 201.607580][T25057] netlink: 'syz.1.4151': attribute type 13 has an invalid length. [ 201.618100][T25059] loop5: detected capacity change from 0 to 512 [ 201.641927][T25059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.658921][T25057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.695790][T23814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.716554][T25064] netlink: 'syz.5.4153': attribute type 1 has an invalid length. [ 201.732774][T25064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.781315][T25064] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.792784][T25064] bond1: (slave batadv1): making interface the new active one [ 201.805674][T25064] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 201.830713][T25073] loop3: detected capacity change from 0 to 512 [ 201.851875][T25073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.874529][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.882110][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.889589][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.897000][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.904664][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.912139][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.919557][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.927056][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.934532][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.941924][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.964000][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.983494][T25081] __nla_validate_parse: 15 callbacks suppressed [ 201.983513][T25081] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4162'. [ 201.985562][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 202.064576][T25093] loop5: detected capacity change from 0 to 128 [ 202.520629][T25134] netlink: 'syz.1.4183': attribute type 1 has an invalid length. [ 202.531716][T25138] netlink: 'syz.0.4185': attribute type 22 has an invalid length. [ 202.539631][T25138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4185'. [ 202.559119][T25134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.572189][T25138] netlink: 'syz.0.4185': attribute type 22 has an invalid length. [ 202.572432][T20752] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.580082][T25138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4185'. [ 202.606985][T25134] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 202.615938][T25134] bond3: (slave batadv2): making interface the new active one [ 202.626336][T25134] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 202.637420][T20752] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.647181][T20752] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.672198][T20752] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.699236][T25141] lo speed is unknown, defaulting to 1000 [ 202.832586][T25148] lo speed is unknown, defaulting to 1000 [ 202.952297][T25167] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 202.981180][T25171] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4203'. [ 203.035739][T25177] lo speed is unknown, defaulting to 1000 [ 203.275554][T25193] loop3: detected capacity change from 0 to 512 [ 203.310654][T25193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.323643][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 203.323660][ T29] audit: type=1400 audit(192.987:6339): avc: denied { write } for pid=25190 comm="syz.1.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.377078][T25193] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4212: invalid indirect mapped block 83886080 (level 1) [ 203.410623][T25193] EXT4-fs (loop3): Remounting filesystem read-only [ 203.417237][ T29] audit: type=1400 audit(192.996:6340): avc: denied { create } for pid=25194 comm="syz.0.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.436315][ T29] audit: type=1400 audit(192.996:6341): avc: denied { bind } for pid=25194 comm="syz.0.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.455041][ T29] audit: type=1400 audit(193.053:6342): avc: denied { write } for pid=25194 comm="syz.0.4213" path="socket:[51043]" dev="sockfs" ino=51043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.499696][T25193] EXT4-fs (loop3): 1 orphan inode deleted [ 203.505563][T25193] EXT4-fs (loop3): 1 truncate cleaned up [ 203.514686][T25193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.541857][T13098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.552901][ T29] audit: type=1400 audit(193.127:6343): avc: denied { read } for pid=25194 comm="syz.0.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.600764][ T29] audit: type=1326 audit(193.240:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25206 comm="syz.4.4218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bd384ebe9 code=0x0 [ 203.752221][ T29] audit: type=1326 audit(193.380:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.1.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 203.815806][ T29] audit: type=1326 audit(193.417:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.1.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 203.838867][ T29] audit: type=1326 audit(193.417:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.1.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 203.861774][ T29] audit: type=1326 audit(193.427:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.1.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850fceebe9 code=0x7ffc0000 [ 204.025494][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 204.034454][T25243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 204.036447][T25241] lo speed is unknown, defaulting to 1000 [ 204.064868][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 204.150688][T25254] lo speed is unknown, defaulting to 1000 [ 204.200676][T25258] loop0: detected capacity change from 0 to 1024 [ 204.209686][T25258] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4241: Failed to acquire dquot type 0 [ 204.221842][T25258] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 204.236833][T25258] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.4241: corrupted inode contents [ 204.249122][T25258] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.4241: mark_inode_dirty error [ 204.261390][T25258] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.4241: corrupted inode contents [ 204.273848][T25258] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.4241: mark_inode_dirty error [ 204.285566][T25258] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.4241: corrupted inode contents [ 204.298241][T25258] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 204.307156][T25258] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.4241: corrupted inode contents [ 204.320606][T25258] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.4241: mark_inode_dirty error [ 204.325624][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4245'. [ 204.334140][T25258] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 204.351094][T25258] EXT4-fs (loop0): 1 truncate cleaned up [ 204.357185][T25258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.377743][T25258] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.391771][T25258] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 204.401667][T25258] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4241: Failed to acquire dquot type 0 [ 204.413704][T25258] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 204.443190][T18844] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /200/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.467752][T18844] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.490544][T18844] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /200/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.514683][T18844] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.588098][T18844] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /200/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.609899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.619583][T18844] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.640206][T18844] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /200/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.664452][T18844] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 204.684575][T18844] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /200/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 204.741941][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 204.755086][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 204.832950][T25285] ip6gre2: entered allmulticast mode [ 204.952559][T25290] netlink: 'syz.1.4257': attribute type 4 has an invalid length. [ 205.023079][T20752] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.033057][T20752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.072407][T25303] loop3: detected capacity change from 0 to 128 [ 205.098089][T20752] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.107950][T20752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.177218][T20752] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.187148][T20752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.247744][T20752] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.257646][T20752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.287921][T25304] lo speed is unknown, defaulting to 1000 [ 205.367380][T20752] bridge_slave_1: left allmulticast mode [ 205.373060][T20752] bridge_slave_1: left promiscuous mode [ 205.378745][T20752] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.386772][T20752] bridge_slave_0: left allmulticast mode [ 205.392425][T20752] bridge_slave_0: left promiscuous mode [ 205.398248][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.534162][T25333] loop5: detected capacity change from 0 to 1024 [ 205.542513][T25333] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.553521][T25333] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.567715][T20752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.576414][T25333] JBD2: no valid journal superblock found [ 205.582209][T25333] EXT4-fs (loop5): Could not load journal inode [ 205.590136][T20752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.602024][T20752] bond0 (unregistering): Released all slaves [ 205.608122][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1e6200: rx timeout, send abort [ 205.608163][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1e7a00: rx timeout, send abort [ 205.613276][T25333] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 205.616402][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1e6200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 205.648393][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1e7a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 205.701921][T25304] chnl_net:caif_netlink_parms(): no params data found [ 205.724500][T20752] hsr_slave_0: left promiscuous mode [ 205.732331][T20752] hsr_slave_1: left promiscuous mode [ 205.738118][T20752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.745534][T20752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.753166][T20752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.760617][T20752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.768004][T25346] loop3: detected capacity change from 0 to 1024 [ 205.778766][T20752] veth1_macvtap: left promiscuous mode [ 205.784495][T20752] veth0_macvtap: left promiscuous mode [ 205.785084][T25346] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.791481][T20752] veth1_vlan: left promiscuous mode [ 205.800952][T25346] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.809219][T20752] veth0_vlan: left promiscuous mode [ 205.842214][T25346] JBD2: no valid journal superblock found [ 205.848100][T25346] EXT4-fs (loop3): Could not load journal inode [ 205.864767][T25346] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 205.959713][T20752] team0 (unregistering): Port device team_slave_1 removed [ 205.974712][T20752] team0 (unregistering): Port device team_slave_0 removed [ 206.071409][T25369] SELinux: failed to load policy [ 206.154781][T25304] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.161886][T25304] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.169368][T25304] bridge_slave_0: entered allmulticast mode [ 206.176070][T25304] bridge_slave_0: entered promiscuous mode [ 206.183157][T25304] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.190344][T25304] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.197717][T25304] bridge_slave_1: entered allmulticast mode [ 206.204294][T25304] bridge_slave_1: entered promiscuous mode [ 206.225885][T25304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.238459][T25304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.277934][T25304] team0: Port device team_slave_0 added [ 206.302606][T25304] team0: Port device team_slave_1 added [ 206.332529][T25304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.339621][T25304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.365656][T25304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.433736][T25304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.440719][T25304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.466721][T25304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.479697][T25404] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 206.560419][T25304] hsr_slave_0: entered promiscuous mode [ 206.568780][T25304] hsr_slave_1: entered promiscuous mode [ 206.617942][T25424] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.628043][T25424] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.737234][T25304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.753697][T25304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.768532][T25304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.777964][T25304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.854786][T25304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.864161][T25458] netlink: 'syz.4.4327': attribute type 21 has an invalid length. [ 206.874548][T25458] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 206.907264][T25304] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.922592][T25466] loop4: detected capacity change from 0 to 512 [ 206.927627][T20752] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.936018][T20752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.949055][T20752] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.956134][T20752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.969647][T25466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.018855][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.024680][T25469] lo speed is unknown, defaulting to 1000 [ 207.067907][T25304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.261014][T25304] veth0_vlan: entered promiscuous mode [ 207.275445][T25304] veth1_vlan: entered promiscuous mode [ 207.295835][T25304] veth0_macvtap: entered promiscuous mode [ 207.341656][T25304] veth1_macvtap: entered promiscuous mode [ 207.356879][T25304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.370591][T25304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.379844][T25515] netlink: 'syz.4.4343': attribute type 3 has an invalid length. [ 207.382348][T20752] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.407736][T20752] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.417363][T20752] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.426336][T20752] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.690911][T25560] binfmt_misc: register: failed to install interpreter file ./file0 [ 207.724308][T25562] 9pnet: Could not find request transport: f [ 207.873544][T25600] openvswitch: netlink: Message has 6 unknown bytes. [ 208.351240][T25681] openvswitch: netlink: Message has 6 unknown bytes. [ 208.427298][T25693] __nla_validate_parse: 5 callbacks suppressed [ 208.427313][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4386'. [ 208.678141][T25733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.690315][T25733] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 208.711919][T25739] netlink: 'syz.5.4395': attribute type 83 has an invalid length. [ 208.738272][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 208.738290][ T29] audit: type=1107 audit(2000000001.178:6533): pid=25737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='@' [ 208.811760][ T29] audit: type=1326 audit(2000000001.244:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25746 comm="syz.5.4399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39fc39ebe9 code=0x0 [ 208.836088][ T29] audit: type=1326 audit(2000000001.244:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.859692][ T29] audit: type=1326 audit(2000000001.244:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.883257][ T29] audit: type=1326 audit(2000000001.244:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.907438][ T29] audit: type=1326 audit(2000000001.244:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.930967][ T29] audit: type=1326 audit(2000000001.244:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.954479][ T29] audit: type=1326 audit(2000000001.244:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 208.978148][ T29] audit: type=1326 audit(2000000001.244:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 209.001846][ T29] audit: type=1326 audit(2000000001.244:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.6.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 209.171211][T25773] loop3: detected capacity change from 0 to 164 [ 209.187541][T25773] rock: directory entry would overflow storage [ 209.193773][T25773] rock: sig=0x66, size=4, remaining=3 [ 209.202604][T25773] rock: directory entry would overflow storage [ 209.208786][T25773] rock: sig=0x66, size=4, remaining=3 [ 209.215618][T25773] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 209.324552][T25795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4423'. [ 209.454935][T25816] netlink: 750 bytes leftover after parsing attributes in process `syz.1.4432'. [ 209.555513][ T10] hid_parser_main: 16 callbacks suppressed [ 209.555534][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 209.569025][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 209.570902][T25839] netlink: 'syz.1.4443': attribute type 3 has an invalid length. [ 209.576467][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 209.577015][ T10] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 209.649247][T25850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4448'. [ 209.651993][T25852] atomic_op ffff888113a7dd28 conn xmit_atomic 0000000000000000 [ 209.658459][T25850] netem: unknown loss type 13 [ 209.670598][T25850] netem: change failed [ 210.588805][T25896] lo speed is unknown, defaulting to 1000 [ 211.467550][T25940] futex_wake_op: syz.5.4487 tries to shift op by -1; fix this program [ 211.563093][T25948] random: crng reseeded on system resumption [ 211.931157][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4502'. [ 211.999634][T25981] vlan2: entered allmulticast mode [ 212.328681][T26015] binfmt_misc: register: failed to install interpreter file ./file0 [ 212.396769][T26026] loop3: detected capacity change from 0 to 2048 [ 212.414595][T26026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.427528][T26026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.680489][T26080] loop5: detected capacity change from 0 to 512 [ 212.687900][T26080] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 212.698827][T26080] EXT4-fs (loop5): 1 truncate cleaned up [ 212.704991][T26080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.773869][T26093] siw: device registration error -23 [ 212.813106][T23814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.863068][T26102] loop5: detected capacity change from 0 to 2048 [ 212.896364][T26102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.928161][T26102] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.944179][T26113] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.951479][T26113] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.038921][T26113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.098721][ T9617] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.107383][ T9617] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.116356][ T9617] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.124757][ T9617] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.199262][ T9617] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.207863][ T9617] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.249407][ T9617] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.257897][ T9617] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.293228][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4534'. [ 213.371957][T26170] loop6: detected capacity change from 0 to 8192 [ 213.800228][T20752] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:410: bg 0: block 345: padding at end of block bitmap is not set [ 213.815365][T20752] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 213.828042][T20752] EXT4-fs (loop5): This should not happen!! Data will be lost [ 213.828042][T20752] [ 213.859459][T20752] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 213.872212][T20752] EXT4-fs (loop5): This should not happen!! Data will be lost [ 213.872212][T20752] [ 213.881901][T20752] EXT4-fs (loop5): Total free blocks count 0 [ 213.887911][T20752] EXT4-fs (loop5): Free/Dirty block details [ 213.893895][T20752] EXT4-fs (loop5): free_blocks=0 [ 213.898887][T20752] EXT4-fs (loop5): dirty_blocks=2032 [ 213.904196][T20752] EXT4-fs (loop5): Block reservation details [ 214.347724][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 214.347741][ T29] audit: type=1326 audit(2000000006.426:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26222 comm="syz.6.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 214.382323][ T29] audit: type=1326 audit(2000000006.426:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26222 comm="syz.6.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 214.405960][ T29] audit: type=1326 audit(2000000006.426:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26222 comm="syz.6.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 214.429524][ T29] audit: type=1326 audit(2000000006.426:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26222 comm="syz.6.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 214.483831][ T29] audit: type=1400 audit(2000000006.557:6761): avc: denied { write } for pid=26224 comm="syz.4.4560" path="socket:[54573]" dev="sockfs" ino=54573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.550117][T26233] lo speed is unknown, defaulting to 1000 [ 214.587929][ T29] audit: type=1400 audit(2000000006.641:6762): avc: denied { bind } for pid=26232 comm="syz.4.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.630471][T26239] netlink: 'syz.4.4567': attribute type 1 has an invalid length. [ 214.802757][T26259] loop4: detected capacity change from 0 to 512 [ 214.816493][T26259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.829407][T26259] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.843014][ T29] audit: type=1400 audit(2000000006.884:6763): avc: denied { mounton } for pid=26258 comm="syz.4.4577" path="/594/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.897985][T26267] ref_ctr_offset mismatch. inode: 0x1353 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0x0 [ 214.910321][T26259] loop4: detected capacity change from 512 to 64 [ 214.924222][T26259] syz.4.4577: attempt to access beyond end of device [ 214.924222][T26259] loop4: rw=2051, sector=104, nr_sectors = 408 limit=64 [ 214.948225][ T7296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory [ 214.957585][ T7296] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 215.185715][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4586'. [ 215.194991][T26279] bridge_slave_1: left allmulticast mode [ 215.200847][T26279] bridge_slave_1: left promiscuous mode [ 215.206615][T26279] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.214596][T26279] bridge_slave_0: left allmulticast mode [ 215.220334][T26279] bridge_slave_0: left promiscuous mode [ 215.225950][T26279] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.459999][T20752] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 215.564327][ T29] audit: type=1326 audit(2000000007.567:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.6.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 215.587940][ T29] audit: type=1326 audit(2000000007.567:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.6.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad449ebe9 code=0x7ffc0000 [ 215.608291][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.612851][ T29] audit: type=1326 audit(2000000007.567:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.6.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7ad449d457 code=0x7ffc0000 [ 215.708483][ T9617] bridge_slave_1: left allmulticast mode [ 215.714344][ T9617] bridge_slave_1: left promiscuous mode [ 215.720049][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.732505][ T9617] bridge_slave_0: left promiscuous mode [ 215.738215][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.810806][ T9617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.821968][ T9617] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 215.830831][ T9617] bond0 (unregistering): Released all slaves [ 215.839266][ T9617] bond1 (unregistering): (slave batadv1): Releasing active interface [ 215.849863][ T9617] bond1 (unregistering): Released all slaves [ 215.895867][ T9617] tipc: Left network mode [ 215.913060][ T9617] hsr_slave_0: left promiscuous mode [ 215.922087][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.956761][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 215.972276][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4604'. [ 215.981474][ T9617] team0 (unregistering): Port device team_slave_0 removed [ 216.008092][T26330] batadv1: left allmulticast mode [ 216.013221][T26330] batadv1: left promiscuous mode [ 216.018289][T26330] bridge0: port 3(batadv1) entered disabled state [ 216.026843][T26330] bridge_slave_1: left allmulticast mode [ 216.032537][T26330] bridge_slave_1: left promiscuous mode [ 216.038239][T26330] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.045989][T26330] bridge_slave_0: left allmulticast mode [ 216.051678][T26330] bridge_slave_0: left promiscuous mode [ 216.057398][T26330] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.137511][T26316] lo speed is unknown, defaulting to 1000 [ 216.197998][T26316] chnl_net:caif_netlink_parms(): no params data found [ 216.244662][T26316] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.251809][T26316] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.257933][T26342] netlink: 'syz.1.4607': attribute type 10 has an invalid length. [ 216.261294][T26316] bridge_slave_0: entered allmulticast mode [ 216.273307][T26316] bridge_slave_0: entered promiscuous mode [ 216.281008][T26342] veth0_vlan: entered allmulticast mode [ 216.294392][T26342] veth0_vlan: left promiscuous mode [ 216.303814][T26342] veth0_vlan: entered promiscuous mode [ 216.312051][T26342] team0: Device veth0_vlan failed to register rx_handler [ 216.355798][T26316] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.363010][T26316] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.409735][T26316] bridge_slave_1: entered allmulticast mode [ 216.416877][T26316] bridge_slave_1: entered promiscuous mode [ 216.465491][ T9617] IPVS: stop unused estimator thread 0... [ 216.472987][T26316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.504482][T26316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.543486][T26364] netlink: 'syz.5.4617': attribute type 13 has an invalid length. [ 216.551574][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'. [ 216.565634][T26316] team0: Port device team_slave_0 added [ 216.571873][T26370] SELinux: security policydb version 17 (MLS) not backwards compatible [ 216.579262][T26316] team0: Port device team_slave_1 added [ 216.588681][T26370] SELinux: failed to load policy [ 216.598139][T26364] netlink: 'syz.5.4617': attribute type 13 has an invalid length. [ 216.606085][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4617'. [ 216.615952][T21338] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.638482][T26316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.645511][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.671596][T26316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.700878][T21338] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.710395][T26316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.717430][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.730101][T26379] loop6: detected capacity change from 0 to 764 [ 216.743595][T26316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.765479][T20752] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.783399][T26380] lo speed is unknown, defaulting to 1000 [ 216.793374][T20752] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.838071][T26316] hsr_slave_0: entered promiscuous mode [ 216.852649][T26316] hsr_slave_1: entered promiscuous mode [ 216.858948][T26316] debugfs: 'hsr0' already exists in 'hsr' [ 216.864714][T26316] Cannot create hsr debugfs directory [ 216.942496][T26398] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 217.076220][T26414] syzkaller1: entered promiscuous mode [ 217.081881][T26414] syzkaller1: entered allmulticast mode [ 217.092520][T26316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.100417][T26414] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 217.117614][T26406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4636'. [ 217.127695][T26316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.150471][T26316] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.184178][T26316] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.227955][T26422] lo speed is unknown, defaulting to 1000 [ 217.289794][T26433] netlink: 'syz.6.4645': attribute type 4 has an invalid length. [ 217.297633][T26433] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4645'. [ 217.358881][T26435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.370521][T26435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.458159][T26316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.471237][T26433] .`: renamed from bond0 (while UP) [ 217.482318][T21338] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.491358][T21338] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.533904][T21338] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.542958][T21338] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.553921][T21338] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.562957][T21338] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.578881][T26316] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.602574][T21338] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.611595][T21338] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.633884][T26459] bond2: entered promiscuous mode [ 217.639034][T26459] bond2: entered allmulticast mode [ 217.644653][T26459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.653684][T26459] bond2 (unregistering): Released all slaves [ 217.670702][T20752] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.677813][T20752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.688540][T20752] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.695657][T20752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.738520][T26316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.748975][T26316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.824371][T26316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.850834][T26485] SELinux: security policydb version 17 (MLS) not backwards compatible [ 217.859346][T26485] SELinux: failed to load policy [ 218.023941][T26504] loop5: detected capacity change from 0 to 8192 [ 218.086614][T26316] veth0_vlan: entered promiscuous mode [ 218.107926][T26316] veth1_vlan: entered promiscuous mode [ 218.133149][T26520] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4677'. [ 218.151559][T26316] veth0_macvtap: entered promiscuous mode [ 218.174983][T26316] veth1_macvtap: entered promiscuous mode [ 218.190411][T26316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.216018][T26316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.242618][T20752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.252208][T26504] ================================================================== [ 218.260342][T26504] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 218.267518][T26504] [ 218.269856][T26504] write to 0xffff88812c5605f0 of 2 bytes by task 26518 on cpu 0: [ 218.277577][T26504] fat16_ent_put+0x28/0x60 [ 218.282014][T26504] fat_ent_write+0x69/0xe0 [ 218.286459][T26504] fat_chain_add+0x15d/0x440 [ 218.291073][T26504] fat_get_block+0x46c/0x5e0 [ 218.295676][T26504] __block_write_begin_int+0x3fd/0xf90 [ 218.301161][T26504] cont_write_begin+0x5fc/0x970 [ 218.306052][T26504] fat_write_begin+0x4f/0xe0 [ 218.310661][T26504] generic_perform_write+0x184/0x490 [ 218.315980][T26504] __generic_file_write_iter+0x9e/0x120 [ 218.321557][T26504] generic_file_write_iter+0x8d/0x2f0 [ 218.326960][T26504] do_iter_readv_writev+0x499/0x540 [ 218.332188][T26504] vfs_writev+0x2df/0x8b0 [ 218.336553][T26504] __se_sys_pwritev2+0xfc/0x1c0 [ 218.341431][T26504] __x64_sys_pwritev2+0x67/0x80 [ 218.346298][T26504] x64_sys_call+0x2c55/0x2ff0 [ 218.350989][T26504] do_syscall_64+0xd2/0x200 [ 218.355506][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.361405][T26504] [ 218.363726][T26504] read to 0xffff88812c560400 of 512 bytes by task 26504 on cpu 1: [ 218.371528][T26504] fat_mirror_bhs+0x1df/0x320 [ 218.376220][T26504] fat_alloc_clusters+0x98b/0xa80 [ 218.381269][T26504] fat_get_block+0x258/0x5e0 [ 218.385864][T26504] __block_write_begin_int+0x3fd/0xf90 [ 218.391342][T26504] cont_write_begin+0x5fc/0x970 [ 218.396202][T26504] fat_write_begin+0x4f/0xe0 [ 218.400819][T26504] cont_write_begin+0x1ad/0x970 [ 218.405679][T26504] fat_write_begin+0x4f/0xe0 [ 218.410274][T26504] generic_cont_expand_simple+0xb0/0x150 [ 218.415917][T26504] fat_cont_expand+0x3e/0x170 [ 218.420619][T26504] fat_setattr+0x2a5/0x8a0 [ 218.425051][T26504] notify_change+0x809/0x890 [ 218.429644][T26504] do_ftruncate+0x34b/0x450 [ 218.434153][T26504] __x64_sys_ftruncate+0x68/0xc0 [ 218.439092][T26504] x64_sys_call+0x2d52/0x2ff0 [ 218.443775][T26504] do_syscall_64+0xd2/0x200 [ 218.448286][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.454187][T26504] [ 218.456508][T26504] Reported by Kernel Concurrency Sanitizer on: [ 218.462661][T26504] CPU: 1 UID: 0 PID: 26504 Comm: syz.5.4671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.474049][T26504] Tainted: [W]=WARN [ 218.477844][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 218.487899][T26504] ================================================================== [ 218.503903][T23423] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.525511][T23423] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.566852][T23423] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.664734][ T7862] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.674592][ T7862] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.805311][ T7862] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.815128][ T7862] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.911394][ T7862] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.921352][ T7862] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.995750][ T7862] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.005523][ T7862] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.153633][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.164656][ T7862] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 219.174928][ T7862] bond0 (unregistering): Released all slaves [ 219.183398][ T7862] bond1 (unregistering): Released all slaves [ 219.191774][ T7862] bond2 (unregistering): Released all slaves [ 219.200361][ T7862] bond3 (unregistering): (slave batadv2): Releasing active interface [ 219.209448][ T7862] bond3 (unregistering): Released all slaves [ 219.275115][ T7862] tipc: Disabling bearer [ 219.280416][ T7862] tipc: Left network mode [ 219.287937][ T7862] hsr_slave_0: left promiscuous mode [ 219.293707][ T7862] hsr_slave_1: left promiscuous mode [ 219.299228][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.306801][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.316788][ T7862] veth1_macvtap: left promiscuous mode [ 219.322268][ T7862] veth0_macvtap: left promiscuous mode [ 219.328144][ T7862] veth1_vlan: left promiscuous mode [ 219.377966][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 219.388242][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 219.873111][ T7862] IPVS: stop unused estimator thread 0... [ 220.110328][ T7862] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.150907][ T7862] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.204726][ T7862] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.268895][ T7862] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.357142][ T7862] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.367017][ T7862] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.417174][ T7862] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.427033][ T7862] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.470741][ T7862] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.480588][ T7862] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.524190][ T7862] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.533990][ T7862] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.600575][ T7862] bridge_slave_1: left allmulticast mode [ 220.606299][ T7862] bridge_slave_1: left promiscuous mode [ 220.612044][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.619980][ T7862] bridge_slave_0: left promiscuous mode [ 220.625663][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.633927][ T7862] bridge_slave_1: left allmulticast mode [ 220.639675][ T7862] bridge_slave_1: left promiscuous mode [ 220.645505][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.653295][ T7862] bridge_slave_0: left allmulticast mode [ 220.659028][ T7862] bridge_slave_0: left promiscuous mode [ 220.664784][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.727141][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.736460][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.745658][ T7862] bond0 (unregistering): Released all slaves [ 220.754432][ T7862] bond1 (unregistering): (slave batadv1): Releasing active interface [ 220.763052][ T7862] bond1 (unregistering): Released all slaves [ 220.814452][ T7862] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.824047][ T7862] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.833367][ T7862] .` (unregistering): Released all slaves [ 220.878561][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.888190][ T7862] bond0 (unregistering): Released all slaves [ 220.926005][ T7862] hsr_slave_0: left promiscuous mode [ 220.932346][ T7862] hsr_slave_1: left promiscuous mode [ 220.938028][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.945765][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.954787][ T7862] hsr_slave_0: left promiscuous mode [ 220.960297][ T7862] hsr_slave_1: left promiscuous mode [ 220.965880][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.973340][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.980956][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.988428][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.997905][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.005346][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.012890][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.020310][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.027984][ T7862] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 221.034813][ T7862] batman_adv: batadv0: Removing interface: ipvlan2 [ 221.046232][ T7862] veth1_macvtap: left promiscuous mode [ 221.051823][ T7862] veth0_macvtap: left promiscuous mode [ 221.057435][ T7862] veth1_vlan: left promiscuous mode [ 221.062663][ T7862] veth0_vlan: left promiscuous mode [ 221.068472][ T7862] veth1_macvtap: left promiscuous mode [ 221.073975][ T7862] veth0_macvtap: left promiscuous mode [ 221.079789][ T7862] veth1_vlan: left promiscuous mode [ 221.085067][ T7862] veth0_vlan: left promiscuous mode [ 221.175230][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 221.184275][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 221.236641][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 221.246563][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 221.296164][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 221.305685][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 221.334759][ T3377] lo speed is unknown, defaulting to 1000 [ 221.340683][ T3377] infiniband syz0: ib_query_port failed (-19) [ 222.076853][ T7862] IPVS: stop unused estimator thread 0... [ 222.119289][ T7862] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.182510][ T7862] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.267826][ T7862] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.321306][ T7862] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.385675][ T7862] bridge_slave_1: left allmulticast mode [ 222.391355][ T7862] bridge_slave_1: left promiscuous mode [ 222.397116][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.405079][ T7862] bridge_slave_0: left allmulticast mode [ 222.410730][ T7862] bridge_slave_0: left promiscuous mode [ 222.416413][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.503561][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.513346][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.522783][ T7862] bond0 (unregistering): Released all slaves [ 222.568219][ T7862] hsr_slave_0: left promiscuous mode [ 222.573883][ T7862] hsr_slave_1: left promiscuous mode [ 222.579629][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.587070][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.594601][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.602061][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.611964][ T7862] veth1_macvtap: left promiscuous mode [ 222.617454][ T7862] veth0_macvtap: left promiscuous mode [ 222.623138][ T7862] veth1_vlan: left promiscuous mode [ 222.628372][ T7862] veth0_vlan: left promiscuous mode [ 222.687665][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 222.697533][ T7862] team0 (unregistering): Port device team_slave_0 removed