last executing test programs: 35.791680377s ago: executing program 1 (id=105): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="0400e16515b5", 0x6, 0x10004894, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @remote}, 0x14) 35.751677398s ago: executing program 1 (id=107): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)={0x5c, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x4c, 0xf2, 0x0, 0x1, [@typed={0xc, 0x19, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade"]}]}, 0x5c}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[]) 35.548194691s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000b95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 35.456154642s ago: executing program 1 (id=115): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000380)={[{@min_batch_time}, {@errors_remount}, {@init_itable}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 35.287103635s ago: executing program 1 (id=120): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) 34.90964113s ago: executing program 1 (id=128): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 34.90945503s ago: executing program 32 (id=128): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 22.647436299s ago: executing program 4 (id=348): r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 22.62945056s ago: executing program 4 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 22.57834373s ago: executing program 4 (id=350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) 21.672554883s ago: executing program 4 (id=375): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x24, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 21.573640335s ago: executing program 4 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 21.361162268s ago: executing program 4 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 21.314123409s ago: executing program 33 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 12.396368109s ago: executing program 2 (id=620): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 12.34991248s ago: executing program 2 (id=615): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x1, 0xf0, 0x93c41685972140f0}}, 0x18) 11.789181858s ago: executing program 2 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb", 0x1}, {0x0}], 0x2}}], 0x1, 0x20004810) 11.787266598s ago: executing program 34 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb", 0x1}, {0x0}], 0x2}}], 0x1, 0x20004810) 2.540451763s ago: executing program 6 (id=846): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf37) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 1.578008857s ago: executing program 3 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r1, r2, 0x0, 0x110003) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"}) 1.571697007s ago: executing program 6 (id=878): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.504689568s ago: executing program 6 (id=870): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xc8) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.459570699s ago: executing program 3 (id=872): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x11, 0x141002) 1.338025021s ago: executing program 3 (id=876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) close_range(r1, 0xffffffffffffffff, 0x0) 1.091192374s ago: executing program 3 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.036165495s ago: executing program 3 (id=881): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 653.70376ms ago: executing program 0 (id=890): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x11, 0x141002) 624.184681ms ago: executing program 0 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 605.041051ms ago: executing program 0 (id=893): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 551.262372ms ago: executing program 0 (id=895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) 488.420943ms ago: executing program 0 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 443.653994ms ago: executing program 6 (id=898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 416.226214ms ago: executing program 7 (id=900): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 401.819994ms ago: executing program 6 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r2, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) 401.384424ms ago: executing program 5 (id=914): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioperm(0x0, 0x1, 0x1) 242.942877ms ago: executing program 6 (id=903): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 242.259956ms ago: executing program 0 (id=916): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xc8) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 241.764136ms ago: executing program 5 (id=904): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 241.461356ms ago: executing program 7 (id=905): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 230.724427ms ago: executing program 3 (id=906): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 163.593068ms ago: executing program 5 (id=907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x1566, &(0x7f0000000200)={0x0, 0x80004661, 0x1, 0x3, 0x288}, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 163.149838ms ago: executing program 7 (id=909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 96.841169ms ago: executing program 5 (id=911): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getrlimit(0x0, &(0x7f00000001c0)) 88.917599ms ago: executing program 7 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 63.824419ms ago: executing program 5 (id=913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x0) read(r1, &(0x7f0000000100)=""/208, 0xd0) 53.46197ms ago: executing program 7 (id=915): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 9.36209ms ago: executing program 5 (id=917): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 0s ago: executing program 7 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) kernel console output (not intermixed with test programs): ace with an up link [ 28.113090][ T3304] team0: Port device team_slave_0 added [ 28.124201][ T3315] team0: Port device team_slave_0 added [ 28.130541][ T3303] team0: Port device team_slave_0 added [ 28.139009][ T3303] team0: Port device team_slave_1 added [ 28.149347][ T3304] team0: Port device team_slave_1 added [ 28.155809][ T3315] team0: Port device team_slave_1 added [ 28.170886][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.177949][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.185212][ T3309] bridge_slave_0: entered allmulticast mode [ 28.191620][ T3309] bridge_slave_0: entered promiscuous mode [ 28.213375][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.220461][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.227649][ T3309] bridge_slave_1: entered allmulticast mode [ 28.234023][ T3309] bridge_slave_1: entered promiscuous mode [ 28.250406][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.257353][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.283403][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.296106][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.303087][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.329077][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.343588][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.350560][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.376508][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.387407][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.394379][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.420373][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.433089][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.440055][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.466038][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.481370][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.488437][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.514364][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.535471][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.563384][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.572565][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.579605][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.586753][ T3314] bridge_slave_0: entered allmulticast mode [ 28.593203][ T3314] bridge_slave_0: entered promiscuous mode [ 28.611497][ T3315] hsr_slave_0: entered promiscuous mode [ 28.617436][ T3315] hsr_slave_1: entered promiscuous mode [ 28.628572][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.635657][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.642777][ T3314] bridge_slave_1: entered allmulticast mode [ 28.649063][ T3314] bridge_slave_1: entered promiscuous mode [ 28.666064][ T3304] hsr_slave_0: entered promiscuous mode [ 28.672133][ T3304] hsr_slave_1: entered promiscuous mode [ 28.677816][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.685437][ T3304] Cannot create hsr debugfs directory [ 28.718872][ T3303] hsr_slave_0: entered promiscuous mode [ 28.725044][ T3303] hsr_slave_1: entered promiscuous mode [ 28.731077][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.738625][ T3303] Cannot create hsr debugfs directory [ 28.756057][ T3309] team0: Port device team_slave_0 added [ 28.763063][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.772861][ T3309] team0: Port device team_slave_1 added [ 28.794087][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.843227][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.850232][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.876142][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.896378][ T3314] team0: Port device team_slave_0 added [ 28.902779][ T3314] team0: Port device team_slave_1 added [ 28.908629][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.915740][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.941758][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.981184][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.988141][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.014110][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.039565][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.046601][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.072651][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.103398][ T3309] hsr_slave_0: entered promiscuous mode [ 29.109340][ T3309] hsr_slave_1: entered promiscuous mode [ 29.115229][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.122817][ T3309] Cannot create hsr debugfs directory [ 29.168787][ T3314] hsr_slave_0: entered promiscuous mode [ 29.174720][ T3314] hsr_slave_1: entered promiscuous mode [ 29.180671][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.188207][ T3314] Cannot create hsr debugfs directory [ 29.222253][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.239835][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.255278][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.263714][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.281154][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.289649][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.313886][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.324216][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.347744][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.356305][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.364672][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.373775][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.403558][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.412772][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.422088][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.431605][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.487918][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.496288][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.509940][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.518364][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.547612][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.556831][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.575933][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.586619][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.600737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.607769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.624443][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.633107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.640217][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.649230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.656358][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.672934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.680051][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.709839][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.720773][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.727893][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.745942][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.753035][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.768027][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.782667][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.798309][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.820759][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.827812][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.837792][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.844875][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.856005][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.882176][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.889237][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.898185][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.905301][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.930581][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.945433][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.995268][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.040003][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.128997][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.138899][ T3303] veth0_vlan: entered promiscuous mode [ 30.171282][ T3303] veth1_vlan: entered promiscuous mode [ 30.179411][ T3304] veth0_vlan: entered promiscuous mode [ 30.186015][ T3309] veth0_vlan: entered promiscuous mode [ 30.203172][ T3304] veth1_vlan: entered promiscuous mode [ 30.212878][ T3303] veth0_macvtap: entered promiscuous mode [ 30.222581][ T3309] veth1_vlan: entered promiscuous mode [ 30.238003][ T3309] veth0_macvtap: entered promiscuous mode [ 30.251612][ T3303] veth1_macvtap: entered promiscuous mode [ 30.258834][ T3309] veth1_macvtap: entered promiscuous mode [ 30.275625][ T3304] veth0_macvtap: entered promiscuous mode [ 30.289676][ T3304] veth1_macvtap: entered promiscuous mode [ 30.296553][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.308833][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.322483][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.331369][ T3315] veth0_vlan: entered promiscuous mode [ 30.337944][ T3314] veth0_vlan: entered promiscuous mode [ 30.347787][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.355489][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.364242][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.373049][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381794][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.395108][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.402937][ T3315] veth1_vlan: entered promiscuous mode [ 30.411211][ T3314] veth1_vlan: entered promiscuous mode [ 30.421550][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.431747][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.440572][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.449263][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.458005][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.474025][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.482764][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.491625][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500333][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.515479][ T3315] veth0_macvtap: entered promiscuous mode [ 30.529788][ T3315] veth1_macvtap: entered promiscuous mode [ 30.544366][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.556165][ T3314] veth0_macvtap: entered promiscuous mode [ 30.564773][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.582665][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.592097][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.600849][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.609542][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.618316][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629440][ T3314] veth1_macvtap: entered promiscuous mode [ 30.664494][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.697548][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.708491][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.717551][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.726316][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.735069][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.843479][ T3489] netlink: 'syz.3.7': attribute type 3 has an invalid length. [ 30.958806][ T3502] loop4: detected capacity change from 0 to 1024 [ 30.984443][ T3502] ======================================================= [ 30.984443][ T3502] WARNING: The mand mount option has been deprecated and [ 30.984443][ T3502] and is ignored by this kernel. Remove the mand [ 30.984443][ T3502] option from the mount to silence this warning. [ 30.984443][ T3502] ======================================================= [ 31.025782][ T3496] loop1: detected capacity change from 0 to 4096 [ 31.062410][ T3506] ALSA: seq fatal error: cannot create timer (-19) [ 31.069424][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.105830][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 31.105843][ T29] audit: type=1400 audit(1752043396.486:108): avc: denied { mount } for pid=3495 comm="syz.1.10" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.141764][ T3502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.181873][ T3513] loop3: detected capacity change from 0 to 512 [ 31.210480][ T29] audit: type=1400 audit(1752043396.496:109): avc: denied { add_name } for pid=3495 comm="syz.1.10" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.218441][ T3502] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.230916][ T29] audit: type=1400 audit(1752043396.496:110): avc: denied { create } for pid=3495 comm="syz.1.10" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.230940][ T29] audit: type=1400 audit(1752043396.496:111): avc: denied { read write } for pid=3495 comm="syz.1.10" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.230962][ T29] audit: type=1400 audit(1752043396.496:112): avc: denied { open } for pid=3495 comm="syz.1.10" path="/2/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.231054][ T29] audit: type=1400 audit(1752043396.596:113): avc: denied { mount } for pid=3499 comm="syz.4.12" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.354716][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.390009][ T3513] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.429260][ T3513] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.15: Allocating blocks 18-19 which overlap fs metadata [ 31.480054][ T3518] loop0: detected capacity change from 0 to 1024 [ 31.486808][ T3513] syz.3.15 (3513) used greatest stack depth: 10712 bytes left [ 31.490161][ T29] audit: type=1400 audit(1752043396.866:114): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.526722][ T3518] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 31.536238][ T29] audit: type=1400 audit(1752043396.906:115): avc: denied { create } for pid=3495 comm="syz.1.10" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.559718][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.589130][ T29] audit: type=1400 audit(1752043396.966:116): avc: denied { create } for pid=3519 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.650855][ T41] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 15) [ 31.685196][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 31.697815][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.697815][ T41] [ 31.735873][ T29] audit: type=1326 audit(1752043397.116:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc42e929 code=0x7ffc0000 [ 31.762272][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.800440][ T3526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'. [ 31.814424][ T3528] loop3: detected capacity change from 0 to 128 [ 31.838382][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.838430][ T3528] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.870570][ T3528] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.971689][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 32.061296][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.201296][ T3569] netlink: 165 bytes leftover after parsing attributes in process `syz.0.38'. [ 32.211791][ T3569] netlink: 277 bytes leftover after parsing attributes in process `syz.0.38'. [ 32.294880][ T3576] raw_sendmsg: syz.1.42 forgot to set AF_INET. Fix it! [ 32.638124][ T3602] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure [ 32.808491][ T3617] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.882863][ T3621] bond1 (unregistering): Released all slaves [ 33.097467][ T3641] loop9: detected capacity change from 0 to 7 [ 33.097709][ T3641] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.097782][ T3641] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.097797][ T3641] loop9: unable to read partition table [ 33.097818][ T3641] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 33.097818][ T3641] ) failed (rc=-5) [ 33.103973][ T3639] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 33.154820][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.154906][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.154969][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.155035][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.155109][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.218691][ T3643] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.730206][ T3690] mmap: syz.4.92 (3690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.787315][ T3694] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 33.787315][ T3694] program syz.1.94 not setting count and/or reply_len properly [ 33.932370][ T3702] SELinux: failed to load policy [ 33.943523][ T3710] loop2: detected capacity change from 0 to 512 [ 33.958932][ T3710] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.011034][ T3722] loop1: detected capacity change from 0 to 128 [ 34.021951][ T3722] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.025613][ T3710] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm wg1: iget: bad i_size value: -6917529027641081756 [ 34.056711][ T3710] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm wg1: couldn't read orphan inode 17 (err -117) [ 34.057208][ T3722] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.102012][ T3710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.180498][ T3710] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 65: padding at end of block bitmap is not set [ 34.197476][ T3710] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 0 [ 34.209563][ T3736] loop0: detected capacity change from 0 to 164 [ 34.217175][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.234089][ T3736] process 'syz.0.112' launched '/dev/fd/5' with NULL argv: empty string added [ 34.242480][ T3710] wg1 (3710) used greatest stack depth: 9416 bytes left [ 34.269035][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.271343][ T3736] syz.0.112: attempt to access beyond end of device [ 34.271343][ T3736] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.300453][ T3736] syz.0.112: attempt to access beyond end of device [ 34.300453][ T3736] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.302201][ T3741] loop1: detected capacity change from 0 to 2048 [ 34.344108][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.360347][ T3745] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 34.463320][ T3304] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.510637][ T3304] EXT4-fs (loop1): Remounting filesystem read-only [ 34.725607][ T3769] loop3: detected capacity change from 0 to 2048 [ 34.768858][ T3769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.771015][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.798474][ T3769] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 34.827411][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.875260][ T3769] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 34.887678][ T3769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.887678][ T3769] [ 34.897336][ T3769] EXT4-fs (loop3): Total free blocks count 0 [ 34.903339][ T3769] EXT4-fs (loop3): Free/Dirty block details [ 34.909319][ T3769] EXT4-fs (loop3): free_blocks=4096 [ 34.914629][ T3769] EXT4-fs (loop3): dirty_blocks=48 [ 34.919737][ T3769] EXT4-fs (loop3): Block reservation details [ 34.925754][ T3769] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 34.953594][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.956837][ T3783] loop4: detected capacity change from 0 to 1024 [ 34.997820][ T3783] EXT4-fs: Ignoring removed bh option [ 35.004964][ T3783] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.011421][ T3783] EXT4-fs: Ignoring removed bh option [ 35.029905][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.055884][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.080387][ T3783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.096636][ T3795] loop0: detected capacity change from 0 to 128 [ 35.118137][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.127410][ T3795] FAT-fs (loop0): Directory bread(block 162) failed [ 35.149215][ T3795] FAT-fs (loop0): Directory bread(block 163) failed [ 35.160959][ T3783] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.133: Allocating blocks 449-513 which overlap fs metadata [ 35.199054][ T3795] FAT-fs (loop0): Directory bread(block 164) failed [ 35.219910][ T3782] EXT4-fs (loop4): pa ffff888105765070: logic 48, phys. 177, len 21 [ 35.222116][ T3795] FAT-fs (loop0): Directory bread(block 165) failed [ 35.227939][ T3782] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 35.255473][ T3795] FAT-fs (loop0): Directory bread(block 166) failed [ 35.263374][ T3795] FAT-fs (loop0): Directory bread(block 167) failed [ 35.271433][ T3795] FAT-fs (loop0): Directory bread(block 168) failed [ 35.278042][ T3795] FAT-fs (loop0): Directory bread(block 169) failed [ 35.293629][ T41] bridge_slave_1: left allmulticast mode [ 35.293637][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.299288][ T41] bridge_slave_1: left promiscuous mode [ 35.299373][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.329692][ T41] bridge_slave_0: left allmulticast mode [ 35.335453][ T41] bridge_slave_0: left promiscuous mode [ 35.341272][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.442220][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.470399][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.483197][ T41] bond0 (unregistering): Released all slaves [ 35.503919][ T3786] chnl_net:caif_netlink_parms(): no params data found [ 35.531002][ T3815] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.549404][ T41] hsr_slave_0: left promiscuous mode [ 35.555029][ T41] hsr_slave_1: left promiscuous mode [ 35.563191][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.570636][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.592166][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.599672][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.619964][ T41] veth1_macvtap: left promiscuous mode [ 35.627504][ T41] veth0_macvtap: left promiscuous mode [ 35.633358][ T41] veth1_vlan: left promiscuous mode [ 35.638680][ T41] veth0_vlan: left promiscuous mode [ 35.782350][ T41] team0 (unregistering): Port device team_slave_1 removed [ 35.805748][ T41] team0 (unregistering): Port device team_slave_0 removed [ 35.904818][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.911951][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.944710][ T3786] bridge_slave_0: entered allmulticast mode [ 35.967249][ T3786] bridge_slave_0: entered promiscuous mode [ 35.991303][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.998408][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.055130][ T3786] bridge_slave_1: entered allmulticast mode [ 36.092139][ T3862] loop2: detected capacity change from 0 to 764 [ 36.097086][ T3786] bridge_slave_1: entered promiscuous mode [ 36.110175][ T3868] loop3: detected capacity change from 0 to 1024 [ 36.120850][ T3862] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.133126][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 36.133140][ T29] audit: type=1400 audit(1752043401.516:324): avc: denied { name_bind } for pid=3864 comm="syz.0.153" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.160796][ T29] audit: type=1400 audit(1752043401.516:325): avc: denied { node_bind } for pid=3864 comm="syz.0.153" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.192282][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.221804][ T3786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.229936][ T3868] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.232002][ T3786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.252096][ T29] audit: type=1400 audit(1752043401.566:326): avc: denied { remove_name } for pid=3871 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1318 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.275449][ T29] audit: type=1400 audit(1752043401.566:327): avc: denied { unlink } for pid=3871 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1318 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.298523][ T29] audit: type=1400 audit(1752043401.586:328): avc: denied { read } for pid=3861 comm="syz.2.151" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.321300][ T29] audit: type=1400 audit(1752043401.586:329): avc: denied { open } for pid=3861 comm="syz.2.151" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.337120][ T3868] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm syz.3.152: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.344734][ T29] audit: type=1400 audit(1752043401.706:330): avc: denied { map } for pid=3867 comm="syz.3.152" path="socket:[5120]" dev="sockfs" ino=5120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 36.360848][ T3868] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 36.393646][ T3868] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.393646][ T3868] [ 36.403472][ T3883] loop0: detected capacity change from 0 to 128 [ 36.419768][ T3786] team0: Port device team_slave_0 added [ 36.428611][ T3786] team0: Port device team_slave_1 added [ 36.428666][ T3868] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.152: lblock 3 mapped to illegal pblock 3 (length 5) [ 36.451868][ T3868] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 36.464212][ T3868] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.464212][ T3868] [ 36.490648][ T3883] syz.0.154: attempt to access beyond end of device [ 36.490648][ T3883] loop0: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 36.514760][ T3883] syz.0.154: attempt to access beyond end of device [ 36.514760][ T3883] loop0: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 36.538111][ T3786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.545095][ T3786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.571089][ T3786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.587975][ T3895] loop2: detected capacity change from 0 to 512 [ 36.600195][ T3883] syz.0.154: attempt to access beyond end of device [ 36.600195][ T3883] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 36.613537][ T3883] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 36.614874][ T3895] EXT4-fs: Ignoring removed nobh option [ 36.633525][ T3883] syz.0.154: attempt to access beyond end of device [ 36.633525][ T3883] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 36.646877][ T3883] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 36.664848][ T3895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.668571][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.681083][ T3883] syz.0.154: attempt to access beyond end of device [ 36.681083][ T3883] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 36.700174][ T3883] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 36.721030][ T3786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.728022][ T3786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.754051][ T3786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.765306][ T3883] syz.0.154: attempt to access beyond end of device [ 36.765306][ T3883] loop0: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 36.779255][ T3883] syz.0.154: attempt to access beyond end of device [ 36.779255][ T3883] loop0: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 36.796679][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.155: corrupted inode contents [ 36.798761][ T3883] syz.0.154: attempt to access beyond end of device [ 36.798761][ T3883] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 36.830031][ T29] audit: type=1400 audit(1752043402.176:331): avc: denied { create } for pid=3914 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.857177][ T3895] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.155: mark_inode_dirty error [ 36.868418][ T29] audit: type=1400 audit(1752043402.216:332): avc: denied { bind } for pid=3914 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.869315][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.155: corrupted inode contents [ 36.887496][ T29] audit: type=1400 audit(1752043402.216:333): avc: denied { write } for pid=3914 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.927246][ T3786] hsr_slave_0: entered promiscuous mode [ 36.937947][ T3786] hsr_slave_1: entered promiscuous mode [ 36.943791][ T3915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 36.949917][ T3895] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.155: mark_inode_dirty error [ 36.963267][ T3895] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.155: Failed to acquire dquot type 0 [ 36.975160][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents [ 36.975967][ T3915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 36.987318][ T3786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.003006][ T3895] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.155: mark_inode_dirty error [ 37.003598][ T3786] Cannot create hsr debugfs directory [ 37.033686][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents [ 37.045870][ T3895] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.155: mark_inode_dirty error [ 37.068286][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents [ 37.109114][ T3895] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 37.119971][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.155: corrupted inode contents [ 37.178305][ T3895] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.155: mark_inode_dirty error [ 37.190278][ T3935] loop4: detected capacity change from 0 to 1024 [ 37.217642][ T3786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.224741][ T3895] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 37.236587][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.250303][ T3786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.259091][ T3895] EXT4-fs (loop2): 1 truncate cleaned up [ 37.265220][ T3895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.281289][ T3786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.300902][ T3895] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.319518][ T3786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.353145][ T3949] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.164'. [ 37.364711][ T3935] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 37.377088][ T3935] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.377088][ T3935] [ 37.386751][ T3935] EXT4-fs (loop4): Total free blocks count 0 [ 37.392751][ T3935] EXT4-fs (loop4): Free/Dirty block details [ 37.398670][ T3935] EXT4-fs (loop4): free_blocks=0 [ 37.403687][ T3935] EXT4-fs (loop4): dirty_blocks=0 [ 37.408779][ T3935] EXT4-fs (loop4): Block reservation details [ 37.414793][ T3935] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 37.453360][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.475099][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.481238][ T3786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.519369][ T3786] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.534280][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.541378][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.572190][ T3967] vhci_hcd: invalid port number 96 [ 37.577353][ T3967] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 37.577768][ T3970] loop4: detected capacity change from 0 to 128 [ 37.602239][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.609323][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.646098][ T3970] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.654088][ T3970] FAT-fs (loop4): Filesystem has been set read-only [ 37.668495][ T3786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.678923][ T3786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.701136][ T3970] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.708970][ T3970] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.786235][ T3786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.837089][ T4001] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 37.879103][ T3983] loop0: detected capacity change from 0 to 2048 [ 37.888024][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 37.911300][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.925324][ T4008] bridge0: port 3(macvlan2) entered blocking state [ 37.932034][ T4008] bridge0: port 3(macvlan2) entered disabled state [ 37.972216][ T4008] macvlan2: entered allmulticast mode [ 37.977638][ T4008] bridge0: entered allmulticast mode [ 37.984704][ T3983] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.012131][ T4008] macvlan2: left allmulticast mode [ 38.017283][ T4008] bridge0: left allmulticast mode [ 38.065671][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.106264][ T3970] buffer_io_error: 9048 callbacks suppressed [ 38.106292][ T3970] Buffer I/O error on dev loop4, logical block 2072, async page read [ 38.136941][ T4038] xt_NFQUEUE: number of total queues is 0 [ 38.159932][ T3970] Buffer I/O error on dev loop4, logical block 2065, async page read [ 38.186248][ T3786] veth0_vlan: entered promiscuous mode [ 38.192190][ T3970] Buffer I/O error on dev loop4, logical block 2066, async page read [ 38.214679][ T3786] veth1_vlan: entered promiscuous mode [ 38.235941][ T3970] Buffer I/O error on dev loop4, logical block 2067, async page read [ 38.257358][ T3786] veth0_macvtap: entered promiscuous mode [ 38.269791][ T3970] Buffer I/O error on dev loop4, logical block 2068, async page read [ 38.288005][ T3786] veth1_macvtap: entered promiscuous mode [ 38.301243][ T3970] Buffer I/O error on dev loop4, logical block 2069, async page read [ 38.316472][ T3970] Buffer I/O error on dev loop4, logical block 2070, async page read [ 38.323523][ T3786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.336683][ T3970] Buffer I/O error on dev loop4, logical block 2071, async page read [ 38.345276][ T3970] Buffer I/O error on dev loop4, logical block 2072, async page read [ 38.357204][ T4064] loop2: detected capacity change from 0 to 512 [ 38.365737][ T3970] Buffer I/O error on dev loop4, logical block 2065, async page read [ 38.383819][ T3786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.401016][ T3786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.409831][ T3786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.418704][ T3786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.427532][ T3786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.430554][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.594193][ T4064] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.788441][ T4094] SELinux: failed to load policy [ 38.873182][ T4064] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.187: corrupted inode contents [ 38.980937][ T4064] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.187: mark_inode_dirty error [ 39.048525][ T4064] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.187: corrupted inode contents [ 39.114015][ T4064] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.187: mark_inode_dirty error [ 39.126130][ T4122] loop5: detected capacity change from 0 to 8192 [ 39.164272][ T4122] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.192207][ T4128] loop3: detected capacity change from 0 to 512 [ 39.227976][ T4128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.243863][ T4128] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.263513][ T4128] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.288571][ T4128] EXT4-fs (loop3): 1 truncate cleaned up [ 39.344994][ T4128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.369011][ T4057] syz.2.187 (4057) used greatest stack depth: 5904 bytes left [ 39.393426][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.409551][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.458928][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.204'. [ 39.492945][ T4141] bridge0: port 3(macvlan2) entered blocking state [ 39.493092][ T4141] bridge0: port 3(macvlan2) entered disabled state [ 39.493150][ T4141] macvlan2: entered allmulticast mode [ 39.493165][ T4141] bridge0: entered allmulticast mode [ 39.494443][ T4141] macvlan2: left allmulticast mode [ 39.494460][ T4141] bridge0: left allmulticast mode [ 39.610228][ T4150] loop3: detected capacity change from 0 to 1024 [ 39.623258][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.627410][ T4150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 39.649067][ T4150] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.649067][ T4150] [ 39.649082][ T4150] EXT4-fs (loop3): Total free blocks count 0 [ 39.649095][ T4150] EXT4-fs (loop3): Free/Dirty block details [ 39.649108][ T4150] EXT4-fs (loop3): free_blocks=0 [ 39.649121][ T4150] EXT4-fs (loop3): dirty_blocks=0 [ 39.649185][ T4150] EXT4-fs (loop3): Block reservation details [ 39.649196][ T4150] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 39.757227][ T4158] loop5: detected capacity change from 0 to 128 [ 39.800705][ T4158] bio_check_eod: 21047 callbacks suppressed [ 39.800721][ T4158] syz.5.209: attempt to access beyond end of device [ 39.800721][ T4158] loop5: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 39.800797][ T4158] syz.5.209: attempt to access beyond end of device [ 39.800797][ T4158] loop5: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 39.800914][ T4158] syz.5.209: attempt to access beyond end of device [ 39.800914][ T4158] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 39.800941][ T4158] syz.5.209: attempt to access beyond end of device [ 39.800941][ T4158] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 39.801009][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801009][ T4158] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 39.801097][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801097][ T4158] loop5: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 39.801122][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801122][ T4158] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 39.801148][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801148][ T4158] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 39.801197][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801197][ T4158] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 39.801284][ T4158] syz.5.209: attempt to access beyond end of device [ 39.801284][ T4158] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 39.875921][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.887844][ T4160] loop2: detected capacity change from 0 to 1024 [ 40.028657][ T4160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.028717][ T4160] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.037544][ T4160] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.210: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.038217][ T4160] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 40.038238][ T4160] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.038238][ T4160] [ 40.041057][ T4160] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.210: lblock 3 mapped to illegal pblock 3 (length 5) [ 40.042000][ T4160] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 40.042022][ T4160] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.042022][ T4160] [ 40.081515][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.366376][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 40.422280][ T4205] bridge0: port 3(macvlan2) entered blocking state [ 40.428902][ T4205] bridge0: port 3(macvlan2) entered disabled state [ 40.440091][ T4205] macvlan2: entered allmulticast mode [ 40.445485][ T4205] bridge0: entered allmulticast mode [ 40.461268][ T4205] macvlan2: left allmulticast mode [ 40.466411][ T4205] bridge0: left allmulticast mode [ 40.548903][ T4229] loop2: detected capacity change from 0 to 128 [ 40.558205][ T4231] loop0: detected capacity change from 0 to 1024 [ 40.594018][ T4231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.658245][ T4231] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 40.670577][ T4231] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.670577][ T4231] [ 40.680301][ T4231] EXT4-fs (loop0): Total free blocks count 0 [ 40.686294][ T4231] EXT4-fs (loop0): Free/Dirty block details [ 40.692293][ T4231] EXT4-fs (loop0): free_blocks=0 [ 40.697234][ T4231] EXT4-fs (loop0): dirty_blocks=0 [ 40.702356][ T4231] EXT4-fs (loop0): Block reservation details [ 40.708381][ T4231] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 40.748508][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.758940][ T4256] loop4: detected capacity change from 0 to 1024 [ 40.786946][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.813647][ T4256] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.832746][ T4256] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.225: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.847591][ T4256] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 40.859969][ T4256] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.859969][ T4256] [ 40.871240][ T4256] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.225: lblock 3 mapped to illegal pblock 3 (length 5) [ 40.886894][ T4256] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 40.899195][ T4256] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.899195][ T4256] [ 40.923635][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.217173][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 41.217192][ T29] audit: type=1400 audit(1752043406.596:436): avc: denied { getopt } for pid=4310 comm="syz.2.236" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.284961][ T29] audit: type=1326 audit(1752043406.666:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.308434][ T29] audit: type=1326 audit(1752043406.666:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374201][ T29] audit: type=1326 audit(1752043406.716:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374231][ T29] audit: type=1326 audit(1752043406.716:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374282][ T29] audit: type=1326 audit(1752043406.716:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374368][ T29] audit: type=1326 audit(1752043406.716:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374392][ T29] audit: type=1326 audit(1752043406.716:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374415][ T29] audit: type=1326 audit(1752043406.716:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.374441][ T29] audit: type=1326 audit(1752043406.716:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff44016e929 code=0x7ffc0000 [ 41.407431][ T4333] loop2: detected capacity change from 0 to 1024 [ 41.442705][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.617833][ T4333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 41.617926][ T4333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.617926][ T4333] [ 41.617940][ T4333] EXT4-fs (loop2): Total free blocks count 0 [ 41.618006][ T4333] EXT4-fs (loop2): Free/Dirty block details [ 41.618015][ T4333] EXT4-fs (loop2): free_blocks=0 [ 41.618025][ T4333] EXT4-fs (loop2): dirty_blocks=0 [ 41.618036][ T4333] EXT4-fs (loop2): Block reservation details [ 41.618046][ T4333] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 41.667849][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.768232][ T4376] loop0: detected capacity change from 0 to 1024 [ 41.782865][ T4376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.800874][ T4376] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.811166][ T4376] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.242: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.826793][ T4376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 41.826889][ T4376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.826889][ T4376] [ 41.829385][ T4376] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.242: lblock 3 mapped to illegal pblock 3 (length 5) [ 41.864643][ T4376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 41.864672][ T4376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.864672][ T4376] [ 41.948667][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.976793][ T4390] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 42.070530][ T4401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.096698][ T4403] loop3: detected capacity change from 0 to 512 [ 42.111377][ T4403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.146629][ T4403] EXT4-fs (loop3): 1 truncate cleaned up [ 42.164399][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.191957][ T4410] loop5: detected capacity change from 0 to 1024 [ 42.220623][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.244133][ T4410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.290730][ T4410] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 42.303136][ T4410] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.303136][ T4410] [ 42.312833][ T4410] EXT4-fs (loop5): Total free blocks count 0 [ 42.318821][ T4410] EXT4-fs (loop5): Free/Dirty block details [ 42.324793][ T4410] EXT4-fs (loop5): free_blocks=0 [ 42.329738][ T4410] EXT4-fs (loop5): dirty_blocks=0 [ 42.334815][ T4410] EXT4-fs (loop5): Block reservation details [ 42.340935][ T4410] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 42.359219][ T3786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.453939][ T4440] loop5: detected capacity change from 0 to 1024 [ 42.472346][ T4440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.472406][ T4440] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.488067][ T4440] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.257: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.492576][ T4449] program syz.4.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.497059][ T4440] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 42.497088][ T4440] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.497088][ T4440] [ 42.499500][ T4440] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 3: comm syz.5.257: lblock 3 mapped to illegal pblock 3 (length 5) [ 42.508157][ T4440] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 42.508194][ T4440] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.508194][ T4440] [ 42.519627][ T3786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.294760][ T4540] pim6reg: entered allmulticast mode [ 43.295856][ T4540] pim6reg: left allmulticast mode [ 43.324988][ T4542] loop0: detected capacity change from 0 to 1024 [ 43.341146][ T4542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.393688][ T4542] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.440953][ T4542] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.276: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.456663][ T4542] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 43.469126][ T4542] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.469126][ T4542] [ 43.515157][ T4553] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.276: lblock 3 mapped to illegal pblock 3 (length 5) [ 43.576923][ T4553] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 43.589322][ T4553] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.589322][ T4553] [ 43.690294][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.899477][ T4748] loop0: detected capacity change from 0 to 1024 [ 44.928274][ T4748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.960434][ T4748] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.979822][ T4748] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.304: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.993873][ T4748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 44.993912][ T4748] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.993912][ T4748] [ 45.007327][ T4748] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.304: lblock 3 mapped to illegal pblock 3 (length 5) [ 45.009897][ T4748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 45.009922][ T4748] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.009922][ T4748] [ 45.033080][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.427651][ T4796] netlink: 'syz.4.309': attribute type 3 has an invalid length. [ 45.576030][ T4812] loop4: detected capacity change from 0 to 2048 [ 45.612639][ T4812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.681944][ T4812] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.314: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 45.745642][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.869272][ T4836] loop5: detected capacity change from 0 to 1024 [ 45.924758][ T4836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.939933][ T4836] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.012699][ T4836] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.318: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.012868][ T4836] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 46.012893][ T4836] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.012893][ T4836] [ 46.027872][ T4836] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 3: comm syz.5.318: lblock 3 mapped to illegal pblock 3 (length 5) [ 46.037136][ T4836] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 46.037209][ T4836] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.037209][ T4836] [ 46.086756][ T4855] loop2: detected capacity change from 0 to 512 [ 46.130115][ T3786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.155825][ T4855] EXT4-fs: Ignoring removed i_version option [ 46.156933][ T4855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.157388][ T4855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.323: bg 0: block 131: padding at end of block bitmap is not set [ 46.157558][ T4855] EXT4-fs (loop2): Remounting filesystem read-only [ 46.157632][ T4855] EXT4-fs (loop2): 1 truncate cleaned up [ 46.158160][ T4855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.220021][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 46.220033][ T29] audit: type=1326 audit(1752044179.609:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4401658e7 code=0x7ffc0000 [ 46.220139][ T29] audit: type=1326 audit(1752044179.609:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff44010ab19 code=0x7ffc0000 [ 46.220279][ T29] audit: type=1326 audit(1752044179.609:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4401658e7 code=0x7ffc0000 [ 46.220520][ T29] audit: type=1326 audit(1752044179.609:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff44010ab19 code=0x7ffc0000 [ 46.220738][ T29] audit: type=1326 audit(1752044179.609:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4401658e7 code=0x7ffc0000 [ 46.220865][ T29] audit: type=1326 audit(1752044179.609:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff44010ab19 code=0x7ffc0000 [ 46.221010][ T29] audit: type=1326 audit(1752044179.609:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4401658e7 code=0x7ffc0000 [ 46.221091][ T29] audit: type=1326 audit(1752044179.609:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff44010ab19 code=0x7ffc0000 [ 46.221253][ T29] audit: type=1326 audit(1752044179.609:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4401658e7 code=0x7ffc0000 [ 46.221429][ T29] audit: type=1326 audit(1752044179.609:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4854 comm="syz.2.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff44010ab19 code=0x7ffc0000 [ 46.275715][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.002916][ T4954] loop4: detected capacity change from 0 to 4096 [ 47.011513][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.038526][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.062694][ T4967] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.346'. [ 47.243219][ T5004] team_slave_0: entered promiscuous mode [ 47.243238][ T5004] team_slave_1: entered promiscuous mode [ 47.244082][ T5004] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 47.265150][ T5004] team0: Device macvtap1 is already an upper device of the team interface [ 47.265585][ T5004] team_slave_0: left promiscuous mode [ 47.265612][ T5004] team_slave_1: left promiscuous mode [ 48.108426][ T5081] loop4: detected capacity change from 0 to 8192 [ 48.132186][ T3315] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 48.139758][ T3315] FAT-fs (loop4): Filesystem has been set read-only [ 48.150404][ T3315] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 48.190562][ T5091] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 48.239428][ T5097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.252563][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 48.263147][ T5097] bridge_slave_1: left allmulticast mode [ 48.268804][ T5097] bridge_slave_1: left promiscuous mode [ 48.274479][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.292089][ T5097] bridge_slave_0: left allmulticast mode [ 48.297760][ T5097] bridge_slave_0: left promiscuous mode [ 48.303527][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.396662][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.471018][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.479511][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.489116][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.542834][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.588548][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.626642][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 48.661923][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.668973][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.676243][ T5135] bridge_slave_0: entered allmulticast mode [ 48.682583][ T5135] bridge_slave_0: entered promiscuous mode [ 48.689179][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.696285][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.703487][ T5135] bridge_slave_1: entered allmulticast mode [ 48.709849][ T5135] bridge_slave_1: entered promiscuous mode [ 48.730590][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.740744][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.761303][ T5135] team0: Port device team_slave_0 added [ 48.767317][ T31] bridge_slave_1: left allmulticast mode [ 48.772993][ T31] bridge_slave_1: left promiscuous mode [ 48.778618][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.786595][ T31] bridge_slave_0: left allmulticast mode [ 48.792249][ T31] bridge_slave_0: left promiscuous mode [ 48.797839][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.853094][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.862738][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.871991][ T31] bond0 (unregistering): Released all slaves [ 48.880089][ T5135] team0: Port device team_slave_1 added [ 48.896322][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.903396][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.929350][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.940679][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.947959][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.973936][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.986179][ T31] hsr_slave_0: left promiscuous mode [ 48.991762][ T31] hsr_slave_1: left promiscuous mode [ 48.997199][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.004657][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.012382][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.019767][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.029773][ T31] veth1_macvtap: left promiscuous mode [ 49.035254][ T31] veth0_macvtap: left promiscuous mode [ 49.040766][ T31] veth1_vlan: left promiscuous mode [ 49.046087][ T31] veth0_vlan: left promiscuous mode [ 49.095161][ T31] team0 (unregistering): Port device team_slave_1 removed [ 49.104280][ T31] team0 (unregistering): Port device team_slave_0 removed [ 49.148664][ T5135] hsr_slave_0: entered promiscuous mode [ 49.154907][ T5135] hsr_slave_1: entered promiscuous mode [ 49.226757][ T5135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.235752][ T5135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.244609][ T5135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.253365][ T5135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.268133][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.275265][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.282529][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.289613][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.317393][ T5135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.328863][ T5135] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.338286][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.346421][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.359506][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.366619][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.385355][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.392459][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.437932][ T5135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.515575][ T5135] veth0_vlan: entered promiscuous mode [ 49.522780][ T5135] veth1_vlan: entered promiscuous mode [ 49.535929][ T5135] veth0_macvtap: entered promiscuous mode [ 49.543295][ T5135] veth1_macvtap: entered promiscuous mode [ 49.553160][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.563748][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.572848][ T5135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.581726][ T5135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.590482][ T5135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.599166][ T5135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.685106][ T5213] netlink: 112 bytes leftover after parsing attributes in process `syz.3.389'. [ 49.753582][ T5231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.754602][ T5231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.792930][ T5238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 49.858978][ T5244] loop2: detected capacity change from 0 to 1024 [ 49.859344][ T5244] EXT4-fs: Ignoring removed nobh option [ 49.859368][ T5244] EXT4-fs: Ignoring removed bh option [ 49.888756][ T5244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.912771][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.582589][ T5279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 51.042357][ T5384] netlink: 'syz.0.424': attribute type 8 has an invalid length. [ 51.520819][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 51.520833][ T29] audit: type=1400 audit(1752044184.908:949): avc: denied { create } for pid=5426 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.560698][ T29] audit: type=1400 audit(1752044184.938:950): avc: denied { cmd } for pid=5426 comm="syz.0.432" path="socket:[8870]" dev="sockfs" ino=8870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.570067][ T5431] loop6: detected capacity change from 0 to 512 [ 51.572701][ T5431] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 51.616094][ T5431] netlink: 128 bytes leftover after parsing attributes in process `syz.6.433'. [ 51.651976][ T29] audit: type=1400 audit(1752044185.028:951): avc: denied { create } for pid=5437 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.700985][ T29] audit: type=1400 audit(1752044185.068:952): avc: denied { setopt } for pid=5437 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.701012][ T29] audit: type=1400 audit(1752044185.078:953): avc: denied { create } for pid=5440 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.761394][ T29] audit: type=1400 audit(1752044185.148:954): avc: denied { setopt } for pid=5451 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.850894][ T29] audit: type=1400 audit(1752044185.228:955): avc: denied { mounton } for pid=5460 comm="syz.0.443" path="/proc/220/task" dev="proc" ino=8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.955956][ T5465] loop5: detected capacity change from 0 to 8192 [ 52.239527][ T29] audit: type=1400 audit(1752044185.618:956): avc: denied { read } for pid=5519 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.290648][ T29] audit: type=1400 audit(1752044185.678:957): avc: denied { create } for pid=5531 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.329587][ T29] audit: type=1400 audit(1752044185.698:958): avc: denied { setopt } for pid=5531 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.818724][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.463'. [ 52.828101][ T5597] netem: change failed [ 53.052938][ T5623] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.226577][ T5661] tipc: Started in network mode [ 53.231543][ T5661] tipc: Node identity , cluster identity 4711 [ 53.237649][ T5661] tipc: Failed to set node id, please configure manually [ 53.244752][ T5661] tipc: Enabling of bearer rejected, failed to enable media [ 53.264615][ T5667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.481'. [ 53.377815][ T5688] loop0: detected capacity change from 0 to 512 [ 53.400609][ T5688] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.416398][ T5695] netlink: 16 bytes leftover after parsing attributes in process `syz.5.489'. [ 53.442780][ T5688] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm wg1: iget: bad i_size value: -6917529027641081756 [ 53.476623][ T5688] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm wg1: couldn't read orphan inode 17 (err -117) [ 53.490487][ T5688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.522514][ T5688] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 65: padding at end of block bitmap is not set [ 53.546387][ T5688] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 0 [ 53.592371][ T5727] netlink: 76 bytes leftover after parsing attributes in process `syz.5.498'. [ 53.607720][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.752042][ T5750] SELinux: failed to load policy [ 53.803093][ T5763] loop6: detected capacity change from 0 to 512 [ 53.811133][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.510'. [ 53.820135][ T5763] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.823150][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.830525][ T5765] IPVS: Error joining to the multicast group [ 53.836574][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.850319][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.857857][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.865408][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.872904][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.873537][ T5763] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #17: comm wg1: iget: bad i_size value: -6917529027641081756 [ 53.880274][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.896187][ T5763] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm wg1: couldn't read orphan inode 17 (err -117) [ 53.900157][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.912836][ T5763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.918734][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.938776][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.946182][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.953592][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.955035][ T5763] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 65: padding at end of block bitmap is not set [ 53.961024][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.982038][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.989413][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.991951][ T5763] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 0 [ 53.996823][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.014921][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.022457][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.029901][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.037313][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.044721][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.052113][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.059586][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.066978][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.074424][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.081854][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.089212][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.096634][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.104077][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.111487][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.118867][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.126293][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.135520][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 54.147092][ T5135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.240488][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 54.347539][ T5801] SELinux: failed to load policy [ 54.448098][ T5827] loop3: detected capacity change from 0 to 512 [ 54.501162][ T5827] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.666093][ T5827] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #17: comm wg1: iget: bad i_size value: -6917529027641081756 [ 54.685578][ T5827] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm wg1: couldn't read orphan inode 17 (err -117) [ 54.702215][ T5827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.727731][ T5827] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 65: padding at end of block bitmap is not set [ 54.755458][ T5827] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 0 [ 54.790157][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.896152][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 54.905865][ T5892] veth0_macvtap: left promiscuous mode [ 55.311924][ T5940] loop2: detected capacity change from 0 to 2048 [ 55.334412][ T5940] EXT4-fs (loop2): failed to initialize system zone (-117) [ 55.347622][ T5940] EXT4-fs (loop2): mount failed [ 55.630799][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 55.651922][ T6003] loop6: detected capacity change from 0 to 512 [ 55.668736][ T6000] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.677601][ T6000] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.686352][ T6000] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.695075][ T6000] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.729286][ T6000] vxlan0: entered promiscuous mode [ 55.773423][ T6003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.795010][ T6003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.810290][ T6003] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.860050][ T5135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.240827][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.569'. [ 56.284984][ T6064] loop2: detected capacity change from 0 to 256 [ 56.296481][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.306772][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.317348][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.332720][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.352427][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.369423][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.380789][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.391182][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.403634][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.414392][ T6064] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.518894][ T6090] hub 9-0:1.0: USB hub found [ 56.531848][ T6091] loop0: detected capacity change from 0 to 512 [ 56.538190][ T6090] hub 9-0:1.0: 8 ports detected [ 56.543795][ T6091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.562729][ T6093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.586'. [ 56.581994][ T6091] EXT4-fs (loop0): 1 truncate cleaned up [ 56.588307][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.617501][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 56.617514][ T29] audit: type=1400 audit(1752044189.997:1152): avc: denied { create } for pid=6088 comm="syz.0.584" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.686291][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.793008][ T29] audit: type=1400 audit(1752044190.147:1153): avc: denied { mounton } for pid=6108 comm="syz.5.593" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 56.817755][ T29] audit: type=1400 audit(1752044190.147:1154): avc: denied { write } for pid=6108 comm="syz.5.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.984707][ T29] audit: type=1400 audit(1752044190.357:1155): avc: denied { getattr } for pid=6105 comm="syz.0.592" name="/" dev="aio" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.042263][ T6119] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.053931][ T6119] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 57.096334][ T29] audit: type=1400 audit(1752044190.477:1156): avc: denied { setopt } for pid=6126 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.142553][ T6130] netlink: 'syz.6.602': attribute type 1 has an invalid length. [ 57.150389][ T6130] netlink: 'syz.6.602': attribute type 4 has an invalid length. [ 57.180395][ T29] audit: type=1400 audit(1752044190.537:1157): avc: denied { mounton } for pid=6131 comm="syz.3.603" path="/proc/288/task" dev="proc" ino=10454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.203001][ T29] audit: type=1400 audit(1752044190.537:1158): avc: denied { mount } for pid=6131 comm="syz.3.603" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.226178][ T29] audit: type=1400 audit(1752044190.567:1159): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.246739][ T29] audit: type=1326 audit(1752044190.607:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc42e929 code=0x7ffc0000 [ 57.270273][ T29] audit: type=1326 audit(1752044190.607:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46dc42e929 code=0x7ffc0000 [ 57.541294][ T6169] netlink: 'syz.6.617': attribute type 4 has an invalid length. [ 57.605433][ T6183] loop2: detected capacity change from 0 to 512 [ 57.618853][ T6183] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 57.637433][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.626: iget: bad i_size value: 12154757448730 [ 57.650260][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.626: couldn't read orphan inode 13 (err -117) [ 57.650904][ T6188] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.670383][ T6188] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 57.678282][ T6183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.807715][ T6206] loop6: detected capacity change from 0 to 128 [ 57.818226][ T6206] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 57.826162][ T6206] FAT-fs (loop6): Filesystem has been set read-only [ 57.834115][ T6206] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 57.881595][ T6212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.922853][ T6195] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.134075][ T6230] chnl_net:caif_netlink_parms(): no params data found [ 58.192425][ T6257] wireguard0: entered promiscuous mode [ 58.197954][ T6257] wireguard0: entered allmulticast mode [ 58.210875][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.217936][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.225090][ T6230] bridge_slave_0: entered allmulticast mode [ 58.231616][ T6230] bridge_slave_0: entered promiscuous mode [ 58.238923][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.246045][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.253424][ T6230] bridge_slave_1: entered allmulticast mode [ 58.259904][ T6230] bridge_slave_1: entered promiscuous mode [ 58.277341][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.287656][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.306498][ T6230] team0: Port device team_slave_0 added [ 58.312879][ T6230] team0: Port device team_slave_1 added [ 58.328718][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.335718][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.361708][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.372990][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.379966][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.405965][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.437252][ T6230] hsr_slave_0: entered promiscuous mode [ 58.443427][ T6230] hsr_slave_1: entered promiscuous mode [ 58.449386][ T6230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.456945][ T6230] Cannot create hsr debugfs directory [ 58.537452][ T6230] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 58.547482][ T6230] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 58.557798][ T6230] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 58.567234][ T6230] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 58.627824][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.646329][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.664742][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.671821][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.681124][ T6280] Cannot find del_set index 4 as target [ 58.685069][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.693879][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.751371][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.831674][ T6230] veth0_vlan: entered promiscuous mode [ 58.838998][ T6230] veth1_vlan: entered promiscuous mode [ 58.853960][ T6230] veth0_macvtap: entered promiscuous mode [ 58.860959][ T6230] veth1_macvtap: entered promiscuous mode [ 58.872821][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.882037][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.893789][ T6230] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.902628][ T6230] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911384][ T6230] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.920112][ T6230] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.059833][ T6321] __nla_validate_parse: 3 callbacks suppressed [ 59.059847][ T6321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.672'. [ 59.177312][ T6335] netlink: 76 bytes leftover after parsing attributes in process `syz.3.677'. [ 59.192127][ T6332] loop0: detected capacity change from 0 to 4096 [ 59.201791][ T6332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.217378][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.678'. [ 59.239014][ T6340] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 59.542392][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.574577][ T6373] netlink: 'wޣ': attribute type 13 has an invalid length. [ 59.635000][ T6373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.829463][ T6398] loop7: detected capacity change from 0 to 512 [ 59.836008][ T6396] loop5: detected capacity change from 0 to 4096 [ 59.858884][ T6396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.866877][ T6398] EXT4-fs (loop7): too many log groups per flexible block group [ 59.879029][ T6398] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 59.885881][ T6398] EXT4-fs (loop7): mount failed [ 59.974221][ T6415] Zero length message leads to an empty skb [ 59.996699][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.711'. [ 60.128708][ T3786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.518097][ T6448] loop6: detected capacity change from 0 to 4096 [ 60.536171][ T6448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.141136][ T5135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.672729][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 61.672744][ T29] audit: type=1400 audit(1752044195.057:1315): avc: denied { read } for pid=6554 comm="syz.7.762" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.700008][ T29] audit: type=1400 audit(1752044195.057:1316): avc: denied { open } for pid=6554 comm="syz.7.762" path="net:[4026532867]" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.731746][ T6551] loop3: detected capacity change from 0 to 4096 [ 61.738608][ T29] audit: type=1400 audit(1752044195.107:1317): avc: denied { create } for pid=6554 comm="syz.7.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.760851][ T29] audit: type=1400 audit(1752044195.127:1318): avc: denied { mounton } for pid=6550 comm="syz.3.757" path="/163/file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.802064][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.821718][ T29] audit: type=1400 audit(1752044195.197:1319): avc: denied { allowed } for pid=6562 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.840960][ T29] audit: type=1400 audit(1752044195.197:1320): avc: denied { create } for pid=6562 comm="syz.6.767" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.884345][ T29] audit: type=1400 audit(1752044195.257:1321): avc: denied { mount } for pid=6550 comm="syz.3.757" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.906459][ T29] audit: type=1400 audit(1752044195.267:1322): avc: denied { append } for pid=6567 comm="syz.7.769" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.932033][ T29] audit: type=1400 audit(1752044195.307:1323): avc: denied { create } for pid=6550 comm="syz.3.757" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.952246][ T29] audit: type=1400 audit(1752044195.317:1324): avc: denied { read } for pid=6550 comm="syz.3.757" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.018281][ T6572] netlink: 'syz.6.772': attribute type 1 has an invalid length. [ 62.078115][ T6575] loop0: detected capacity change from 0 to 8192 [ 62.619677][ T6597] loop5: detected capacity change from 0 to 764 [ 62.676641][ T6597] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.934249][ T6603] loop5: detected capacity change from 0 to 512 [ 63.022988][ T6603] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.230131][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.792: corrupted inode contents [ 63.273919][ T6603] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.792: mark_inode_dirty error [ 63.294855][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.792: corrupted inode contents [ 63.349354][ T6603] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.792: mark_inode_dirty error [ 63.379140][ T6620] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 63.379140][ T6620] program syz.3.788 not setting count and/or reply_len properly [ 63.399241][ T6621] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 63.489821][ T6630] loop0: detected capacity change from 0 to 764 [ 63.503312][ T6628] loop7: detected capacity change from 0 to 512 [ 63.510453][ T6630] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.521892][ T6628] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 63.534764][ T6628] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.549672][ T6628] EXT4-fs (loop7): 1 truncate cleaned up [ 63.701807][ T6600] syz.5.792 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 63.716550][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.5.792 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 63.716591][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.716605][ T6600] Call Trace: [ 63.716611][ T6600] [ 63.716618][ T6600] __dump_stack+0x1d/0x30 [ 63.716697][ T6600] dump_stack_lvl+0xe8/0x140 [ 63.716718][ T6600] dump_stack+0x15/0x1b [ 63.716735][ T6600] dump_header+0x81/0x220 [ 63.716769][ T6600] oom_kill_process+0x334/0x3f0 [ 63.716806][ T6600] out_of_memory+0x979/0xb80 [ 63.716874][ T6600] try_charge_memcg+0x5e6/0x9e0 [ 63.716916][ T6600] obj_cgroup_charge_pages+0xa6/0x150 [ 63.716947][ T6600] __memcg_kmem_charge_page+0x9f/0x170 [ 63.716974][ T6600] __alloc_frozen_pages_noprof+0x188/0x360 [ 63.717008][ T6600] alloc_pages_mpol+0xb3/0x250 [ 63.717084][ T6600] alloc_pages_noprof+0x90/0x130 [ 63.717111][ T6600] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 63.717149][ T6600] __kvmalloc_node_noprof+0x30f/0x4e0 [ 63.717206][ T6600] ? ip_set_alloc+0x1f/0x30 [ 63.717233][ T6600] ? ip_set_alloc+0x1f/0x30 [ 63.717308][ T6600] ? __kmalloc_cache_noprof+0x189/0x320 [ 63.717335][ T6600] ip_set_alloc+0x1f/0x30 [ 63.717362][ T6600] hash_netiface_create+0x282/0x740 [ 63.717394][ T6600] ? __pfx_hash_netiface_create+0x10/0x10 [ 63.717464][ T6600] ip_set_create+0x3c9/0x960 [ 63.717498][ T6600] ? __nla_parse+0x40/0x60 [ 63.717533][ T6600] nfnetlink_rcv_msg+0x4c3/0x590 [ 63.717592][ T6600] ? selinux_capable+0x1f9/0x270 [ 63.717674][ T6600] netlink_rcv_skb+0x120/0x220 [ 63.717707][ T6600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.717790][ T6600] nfnetlink_rcv+0x16b/0x1690 [ 63.717811][ T6600] ? __kfree_skb+0x109/0x150 [ 63.717874][ T6600] ? nlmon_xmit+0x4f/0x60 [ 63.717893][ T6600] ? consume_skb+0x49/0x150 [ 63.717965][ T6600] ? nlmon_xmit+0x4f/0x60 [ 63.717986][ T6600] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 63.718058][ T6600] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 63.718088][ T6600] ? __dev_queue_xmit+0x182/0x1fb0 [ 63.718190][ T6600] ? ref_tracker_free+0x37d/0x3e0 [ 63.718225][ T6600] ? __netlink_deliver_tap+0x4dc/0x500 [ 63.718290][ T6600] netlink_unicast+0x59e/0x670 [ 63.718322][ T6600] netlink_sendmsg+0x58b/0x6b0 [ 63.718406][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.718439][ T6600] __sock_sendmsg+0x142/0x180 [ 63.718465][ T6600] ____sys_sendmsg+0x31e/0x4e0 [ 63.718518][ T6600] ___sys_sendmsg+0x17b/0x1d0 [ 63.718555][ T6600] __x64_sys_sendmsg+0xd4/0x160 [ 63.718715][ T6600] x64_sys_call+0x2999/0x2fb0 [ 63.718737][ T6600] do_syscall_64+0xd2/0x200 [ 63.718812][ T6600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.718839][ T6600] ? clear_bhb_loop+0x40/0x90 [ 63.718889][ T6600] ? clear_bhb_loop+0x40/0x90 [ 63.718912][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.718958][ T6600] RIP: 0033:0x7f7b309ae929 [ 63.718981][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.718999][ T6600] RSP: 002b:00007f7b2f017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.719016][ T6600] RAX: ffffffffffffffda RBX: 00007f7b30bd5fa0 RCX: 00007f7b309ae929 [ 63.719083][ T6600] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 63.719096][ T6600] RBP: 00007f7b30a30b39 R08: 0000000000000000 R09: 0000000000000000 [ 63.719161][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.719173][ T6600] R13: 0000000000000000 R14: 00007f7b30bd5fa0 R15: 00007fff922b80d8 [ 63.719190][ T6600] [ 63.719568][ T6600] memory: usage 307200kB, limit 307200kB, failcnt 228 [ 63.848901][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.7.798'. [ 63.852417][ T6600] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 63.852433][ T6600] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 63.852445][ T6600] Memory cgroup stats for /syz5: [ 63.852756][ T6600] cache 20480 [ 63.852764][ T6600] rss 4096 [ 63.852770][ T6600] shmem 0 [ 63.852777][ T6600] mapped_file 12288 [ 63.852784][ T6600] dirty 0 [ 64.118986][ T6600] writeback 12288 [ 64.122666][ T6600] workingset_refault_anon 70 [ 64.127261][ T6600] workingset_refault_file 0 [ 64.131769][ T6600] swap 438272 [ 64.135085][ T6600] swapcached 24576 [ 64.138826][ T6600] pgpgin 57708 [ 64.142218][ T6600] pgpgout 57697 [ 64.145674][ T6600] pgfault 66121 [ 64.149140][ T6600] pgmajfault 26 [ 64.152608][ T6600] inactive_anon 20480 [ 64.156589][ T6600] active_anon 0 [ 64.160038][ T6600] inactive_file 0 [ 64.163691][ T6600] active_file 20480 [ 64.167486][ T6600] unevictable 0 [ 64.170942][ T6600] hierarchical_memory_limit 314572800 [ 64.176459][ T6600] hierarchical_memsw_limit 9223372036854771712 [ 64.182781][ T6600] total_cache 20480 [ 64.186648][ T6600] total_rss 4096 [ 64.190183][ T6600] total_shmem 0 [ 64.193648][ T6600] total_mapped_file 12288 [ 64.197963][ T6600] total_dirty 0 [ 64.201439][ T6600] total_writeback 12288 [ 64.205669][ T6600] total_workingset_refault_anon 70 [ 64.210809][ T6600] total_workingset_refault_file 0 [ 64.215927][ T6600] total_swap 438272 [ 64.220308][ T6600] total_swapcached 24576 [ 64.224619][ T6600] total_pgpgin 57708 [ 64.228512][ T6600] total_pgpgout 57697 [ 64.232517][ T6600] total_pgfault 66121 [ 64.236561][ T6600] total_pgmajfault 26 [ 64.240545][ T6600] total_inactive_anon 20480 [ 64.245059][ T6600] total_active_anon 0 [ 64.249129][ T6600] total_inactive_file 0 [ 64.253656][ T6600] total_active_file 20480 [ 64.257980][ T6600] total_unevictable 0 [ 64.261958][ T6600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.792,pid=6599,uid=0 [ 64.276664][ T6600] Memory cgroup out of memory: Killed process 6599 (syz.5.792) total-vm:95804kB, anon-rss:940kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 64.322348][ T6652] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 64.322348][ T6652] program syz.6.802 not setting count and/or reply_len properly [ 64.412793][ T6657] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.501032][ T6600] syz.5.792 (6600) used greatest stack depth: 5880 bytes left [ 64.621668][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 64.645396][ T6674] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.654301][ T6674] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.663137][ T6674] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.671870][ T6674] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.702158][ T6674] vxlan0: entered promiscuous mode [ 64.933783][ T6686] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 64.933783][ T6686] program syz.0.816 not setting count and/or reply_len properly [ 65.051417][ T6697] loop3: detected capacity change from 0 to 512 [ 65.080413][ T6697] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.129249][ T6697] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.821: corrupted inode contents [ 65.204782][ T6697] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.821: mark_inode_dirty error [ 65.253235][ T6697] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.821: corrupted inode contents [ 65.269916][ T6697] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.821: mark_inode_dirty error [ 65.530395][ T6724] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.543060][ T6724] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 65.677592][ T6726] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 65.677592][ T6726] program syz.7.834 not setting count and/or reply_len properly [ 65.841652][ T6733] loop7: detected capacity change from 0 to 8192 [ 65.869306][ T6722] netlink: 36 bytes leftover after parsing attributes in process `syz.5.832'. [ 65.903426][ T6722] netlink: 'syz.5.832': attribute type 4 has an invalid length. [ 65.957944][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 65.968933][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 65.969002][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.969012][ T3303] Call Trace: [ 65.969018][ T3303] [ 65.969049][ T3303] __dump_stack+0x1d/0x30 [ 65.969071][ T3303] dump_stack_lvl+0xe8/0x140 [ 65.969092][ T3303] dump_stack+0x15/0x1b [ 65.969148][ T3303] dump_header+0x81/0x220 [ 65.969180][ T3303] oom_kill_process+0x334/0x3f0 [ 65.969230][ T3303] out_of_memory+0x979/0xb80 [ 65.969295][ T3303] try_charge_memcg+0x5e6/0x9e0 [ 65.969382][ T3303] charge_memcg+0x51/0xc0 [ 65.969413][ T3303] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 65.969474][ T3303] __read_swap_cache_async+0x1df/0x350 [ 65.969547][ T3303] swap_cluster_readahead+0x376/0x3e0 [ 65.969579][ T3303] swapin_readahead+0xde/0x6f0 [ 65.969650][ T3303] ? __filemap_get_folio+0x4f7/0x6b0 [ 65.969681][ T3303] ? swap_cache_get_folio+0x77/0x200 [ 65.969710][ T3303] do_swap_page+0x301/0x2430 [ 65.969745][ T3303] ? __set_next_task_fair+0x5b/0x150 [ 65.969763][ T3303] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 65.969796][ T3303] ? finish_task_switch+0xad/0x2b0 [ 65.969853][ T3303] ? __pfx_default_wake_function+0x10/0x10 [ 65.969877][ T3303] handle_mm_fault+0x9a5/0x2be0 [ 65.969895][ T3303] ? mas_walk+0xf2/0x120 [ 65.969927][ T3303] do_user_addr_fault+0x636/0x1090 [ 65.970006][ T3303] ? fpregs_restore_userregs+0xe2/0x1d0 [ 65.970033][ T3303] ? switch_fpu_return+0xe/0x20 [ 65.970057][ T3303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.970081][ T3303] exc_page_fault+0x62/0xa0 [ 65.970138][ T3303] asm_exc_page_fault+0x26/0x30 [ 65.970156][ T3303] RIP: 0033:0x7ff3953211a5 [ 65.970170][ T3303] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 53 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 65.970185][ T3303] RSP: 002b:00007ffe17a15888 EFLAGS: 00010246 [ 65.970198][ T3303] RAX: 0000000000000000 RBX: 0000000000000189 RCX: 00007ff3953211a3 [ 65.970211][ T3303] RDX: 00007ffe17a158a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.970252][ T3303] RBP: 00007ffe17a1590c R08: 0000000033757896 R09: 0000000000000000 [ 65.970265][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 65.970277][ T3303] R13: 00000000000927c0 R14: 000000000000ff1d R15: 00007ffe17a15960 [ 65.970293][ T3303] [ 65.970298][ T3303] memory: usage 307200kB, limit 307200kB, failcnt 231 [ 66.215613][ T3303] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 66.223525][ T3303] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 66.230852][ T3303] Memory cgroup stats for /syz3: [ 66.251363][ T3303] cache 32768 [ 66.259763][ T3303] rss 0 [ 66.262589][ T3303] shmem 0 [ 66.265602][ T3303] mapped_file 0 [ 66.269061][ T3303] dirty 0 [ 66.271996][ T3303] writeback 0 [ 66.275323][ T3303] workingset_refault_anon 68 [ 66.279905][ T3303] workingset_refault_file 116 [ 66.284593][ T3303] swap 466944 [ 66.287898][ T3303] swapcached 0 [ 66.291255][ T3303] pgpgin 20693 [ 66.294667][ T3303] pgpgout 20685 [ 66.298123][ T3303] pgfault 31305 [ 66.301629][ T3303] pgmajfault 41 [ 66.305102][ T3303] inactive_anon 0 [ 66.308732][ T3303] active_anon 0 [ 66.312285][ T3303] inactive_file 0 [ 66.316025][ T3303] active_file 32768 [ 66.319822][ T3303] unevictable 0 [ 66.323383][ T3303] hierarchical_memory_limit 314572800 [ 66.328778][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 66.334972][ T3303] total_cache 32768 [ 66.338780][ T3303] total_rss 0 [ 66.342124][ T3303] total_shmem 0 [ 66.345643][ T3303] total_mapped_file 0 [ 66.349619][ T3303] total_dirty 0 [ 66.353094][ T3303] total_writeback 0 [ 66.356929][ T3303] total_workingset_refault_anon 68 [ 66.362032][ T3303] total_workingset_refault_file 116 [ 66.367277][ T3303] total_swap 466944 [ 66.371068][ T3303] total_swapcached 0 [ 66.374970][ T3303] total_pgpgin 20693 [ 66.378913][ T3303] total_pgpgout 20685 [ 66.382902][ T3303] total_pgfault 31305 [ 66.386956][ T3303] total_pgmajfault 41 [ 66.390922][ T3303] total_inactive_anon 0 [ 66.395212][ T3303] total_active_anon 0 [ 66.399247][ T3303] total_inactive_file 0 [ 66.403471][ T3303] total_active_file 32768 [ 66.407864][ T3303] total_unevictable 0 [ 66.411844][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.821,pid=6692,uid=0 [ 66.426438][ T3303] Memory cgroup out of memory: Killed process 6692 (syz.3.821) total-vm:95804kB, anon-rss:940kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 66.710122][ T3303] EXT4-fs unmount: 6 callbacks suppressed [ 66.710190][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.860439][ T6750] loop6: detected capacity change from 0 to 2048 [ 66.891278][ T6746] loop3: detected capacity change from 0 to 8192 [ 66.898534][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 66.910152][ T6750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.927236][ T6755] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.936132][ T6755] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.944862][ T6755] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.953641][ T6755] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.974229][ T6755] vxlan0: entered promiscuous mode [ 66.987492][ T6750] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 67.003974][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 67.004021][ T29] audit: type=1400 audit(1752044200.366:1423): avc: denied { ioctl } for pid=6757 comm="syz.7.842" path="socket:[12672]" dev="sockfs" ino=12672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.035381][ T29] audit: type=1400 audit(1752044200.366:1424): avc: denied { write } for pid=6757 comm="syz.7.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.056744][ T6750] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 67.069032][ T6750] EXT4-fs (loop6): This should not happen!! Data will be lost [ 67.069032][ T6750] [ 67.078764][ T6750] EXT4-fs (loop6): Total free blocks count 0 [ 67.084827][ T6750] EXT4-fs (loop6): Free/Dirty block details [ 67.090720][ T6750] EXT4-fs (loop6): free_blocks=4096 [ 67.095969][ T6750] EXT4-fs (loop6): dirty_blocks=48 [ 67.101258][ T6750] EXT4-fs (loop6): Block reservation details [ 67.107249][ T6750] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 67.131633][ T5135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.160757][ T29] audit: type=1326 audit(1752044200.536:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.204534][ T29] audit: type=1326 audit(1752044200.536:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.227907][ T29] audit: type=1326 audit(1752044200.536:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.251374][ T29] audit: type=1326 audit(1752044200.536:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.274673][ T29] audit: type=1326 audit(1752044200.536:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.298111][ T29] audit: type=1326 audit(1752044200.536:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.321529][ T29] audit: type=1326 audit(1752044200.536:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.344825][ T29] audit: type=1326 audit(1752044200.536:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8831e929 code=0x7ffc0000 [ 67.369623][ T6765] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.388013][ T6765] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 67.437040][ T6777] loop7: detected capacity change from 0 to 128 [ 67.448302][ T6777] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 67.456312][ T6777] FAT-fs (loop7): Filesystem has been set read-only [ 67.463139][ T6777] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 67.850664][ T6800] netlink: 'wޣ': attribute type 13 has an invalid length. [ 67.900470][ T6800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.913686][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.7.856'. [ 67.927704][ T6790] netlink: 'syz.7.856': attribute type 4 has an invalid length. [ 68.085376][ T6813] netlink: 'wޣ': attribute type 13 has an invalid length. [ 68.105138][ T6815] loop3: detected capacity change from 0 to 512 [ 68.113684][ T6815] EXT4-fs (loop3): too many log groups per flexible block group [ 68.121427][ T6815] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 68.129292][ T6815] EXT4-fs (loop3): mount failed [ 68.150034][ T6813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.281831][ T6830] loop6: detected capacity change from 0 to 8192 [ 68.297862][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.869'. [ 68.325089][ T6838] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.333883][ T6838] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.342774][ T6838] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.351590][ T6838] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.355637][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.874'. [ 68.378725][ T6838] vxlan0: entered promiscuous mode [ 68.417822][ T6809] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 68.664443][ T6854] loop0: detected capacity change from 0 to 512 [ 68.693378][ T6854] EXT4-fs (loop0): too many log groups per flexible block group [ 68.701140][ T6854] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 68.708478][ T6854] EXT4-fs (loop0): mount failed [ 68.762505][ C0] hrtimer: interrupt took 55109 ns [ 68.762690][ T6864] netlink: 'wޣ': attribute type 13 has an invalid length. [ 68.825014][ T6864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.003180][ T6874] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 69.200833][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 69.309602][ T6903] netlink: 'syz.7.899': attribute type 1 has an invalid length. [ 69.552729][ T6919] loop0: detected capacity change from 0 to 8192 [ 69.559379][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.903'. [ 69.584603][ T6922] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.593449][ T6922] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.602197][ T6922] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.610959][ T6922] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.622933][ T6922] vxlan0: entered promiscuous mode [ 69.666122][ T6932] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 70.265884][ T6919] ================================================================== [ 70.273987][ T6919] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 70.282237][ T6919] [ 70.284566][ T6919] write to 0xffff888106bf9f28 of 4 bytes by task 6933 on cpu 0: [ 70.292197][ T6919] writeback_single_inode+0x14a/0x3e0 [ 70.297584][ T6919] sync_inode_metadata+0x5b/0x90 [ 70.302532][ T6919] __generic_file_fsync+0xf8/0x140 [ 70.307658][ T6919] fat_file_fsync+0x49/0x100 [ 70.312261][ T6919] vfs_fsync_range+0x10d/0x130 [ 70.317042][ T6919] generic_file_write_iter+0x1b8/0x2f0 [ 70.322501][ T6919] iter_file_splice_write+0x5f2/0x970 [ 70.327886][ T6919] direct_splice_actor+0x153/0x2a0 [ 70.333005][ T6919] splice_direct_to_actor+0x30f/0x680 [ 70.338389][ T6919] do_splice_direct+0xda/0x150 [ 70.343161][ T6919] do_sendfile+0x380/0x650 [ 70.347573][ T6919] __x64_sys_sendfile64+0x105/0x150 [ 70.352807][ T6919] x64_sys_call+0xb39/0x2fb0 [ 70.357395][ T6919] do_syscall_64+0xd2/0x200 [ 70.361900][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.367787][ T6919] [ 70.370111][ T6919] read to 0xffff888106bf9f28 of 4 bytes by task 6919 on cpu 1: [ 70.377642][ T6919] __mark_inode_dirty+0x18e/0x760 [ 70.382665][ T6919] fat_update_time+0x1ec/0x200 [ 70.387424][ T6919] touch_atime+0x145/0x340 [ 70.391829][ T6919] filemap_splice_read+0x629/0x6b0 [ 70.396940][ T6919] splice_direct_to_actor+0x26f/0x680 [ 70.402316][ T6919] do_splice_direct+0xda/0x150 [ 70.407087][ T6919] do_sendfile+0x380/0x650 [ 70.411502][ T6919] __x64_sys_sendfile64+0x105/0x150 [ 70.416690][ T6919] x64_sys_call+0xb39/0x2fb0 [ 70.421270][ T6919] do_syscall_64+0xd2/0x200 [ 70.425774][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.431658][ T6919] [ 70.433967][ T6919] value changed: 0x00000038 -> 0x00000002 [ 70.439665][ T6919] [ 70.441974][ T6919] Reported by Kernel Concurrency Sanitizer on: [ 70.448110][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.0.916 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 70.460427][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.470474][ T6919] ==================================================================