last executing test programs: 39.474788171s ago: executing program 4 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 39.35559699s ago: executing program 4 (id=204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 39.286982896s ago: executing program 4 (id=210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="870404"], 0x28) 39.265205028s ago: executing program 4 (id=211): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x1, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 39.12079406s ago: executing program 4 (id=217): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 38.801593425s ago: executing program 4 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 38.785601657s ago: executing program 32 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 30.881237687s ago: executing program 2 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 30.737631759s ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 30.736259429s ago: executing program 2 (id=477): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0x4e22, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x28) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 30.629614298s ago: executing program 2 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 30.629146078s ago: executing program 2 (id=482): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r2) 30.416721945s ago: executing program 2 (id=491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000002000000, 0x2) 30.399628986s ago: executing program 33 (id=491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000002000000, 0x2) 7.381930452s ago: executing program 0 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.225061745s ago: executing program 0 (id=1254): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0xa, 0x0, 0x2108}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 7.178622649s ago: executing program 0 (id=1256): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) 6.265500522s ago: executing program 0 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6.229566625s ago: executing program 0 (id=1293): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.390312875s ago: executing program 0 (id=1374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 3.374332117s ago: executing program 34 (id=1374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 1.128721679s ago: executing program 5 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002280)=@generic={0x0, r0}, 0x18) 1.062733044s ago: executing program 5 (id=1436): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 953.553293ms ago: executing program 3 (id=1439): unshare(0x60040200) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000755f3220dd1700555ef30102030109"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 937.492644ms ago: executing program 7 (id=1375): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 842.906232ms ago: executing program 7 (id=1443): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 818.636344ms ago: executing program 5 (id=1445): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x91) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 585.967073ms ago: executing program 7 (id=1454): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 542.025227ms ago: executing program 6 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 522.068768ms ago: executing program 6 (id=1459): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) creat(&(0x7f0000000280)='./bus\x00', 0x2) 503.67162ms ago: executing program 7 (id=1460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001100010027bd7000fddbdf2500000000", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090) 343.295372ms ago: executing program 1 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) 319.747504ms ago: executing program 1 (id=1465): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) 243.120871ms ago: executing program 1 (id=1466): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 242.892581ms ago: executing program 1 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x7ffff088) 242.739181ms ago: executing program 1 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)={0x1c, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x4c002) 218.908633ms ago: executing program 5 (id=1469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 207.383783ms ago: executing program 3 (id=1470): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) 207.085313ms ago: executing program 1 (id=1471): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) write$P9_RLOPEN(r1, &(0x7f00000009c0)={0x18, 0xd, 0x1, {{0x20, 0x1}, 0xf5}}, 0x18) 176.622986ms ago: executing program 6 (id=1472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b9376000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a00000000000000010000002a000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 175.965916ms ago: executing program 3 (id=1473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x40080) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 132.815619ms ago: executing program 5 (id=1474): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 94.233633ms ago: executing program 6 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) 77.199274ms ago: executing program 3 (id=1476): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) 55.684756ms ago: executing program 6 (id=1477): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x3, 0x2}, {0xf, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x800) 39.544537ms ago: executing program 3 (id=1478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x443, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') listxattr(&(0x7f0000000100)='./mnt\x00', 0x0, 0x0) 37.804067ms ago: executing program 6 (id=1479): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x91) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 37.162327ms ago: executing program 5 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 0s ago: executing program 3 (id=1481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ter): interface not active [ 33.456057][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.463071][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.489036][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.505160][ T3299] team0: Port device team_slave_0 added [ 33.512902][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.519923][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.545933][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.557217][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.564286][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.590397][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.607259][ T3299] team0: Port device team_slave_1 added [ 33.619325][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.626283][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.652647][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.674485][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.681479][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.707428][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.733905][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.741016][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.767000][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.786013][ T3300] hsr_slave_0: entered promiscuous mode [ 33.792205][ T3300] hsr_slave_1: entered promiscuous mode [ 33.807575][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.814566][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.840727][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.851962][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.858968][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.884883][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.913287][ T3301] hsr_slave_0: entered promiscuous mode [ 33.919542][ T3301] hsr_slave_1: entered promiscuous mode [ 33.925280][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.931098][ T3301] Cannot create hsr debugfs directory [ 33.943749][ T3305] hsr_slave_0: entered promiscuous mode [ 33.950084][ T3305] hsr_slave_1: entered promiscuous mode [ 33.955930][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 33.961685][ T3305] Cannot create hsr debugfs directory [ 33.997461][ T3309] hsr_slave_0: entered promiscuous mode [ 34.003596][ T3309] hsr_slave_1: entered promiscuous mode [ 34.009474][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 34.015203][ T3309] Cannot create hsr debugfs directory [ 34.027261][ T3299] hsr_slave_0: entered promiscuous mode [ 34.034776][ T3299] hsr_slave_1: entered promiscuous mode [ 34.040706][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.046434][ T3299] Cannot create hsr debugfs directory [ 34.252817][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.261869][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.273909][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.282622][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.304270][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.315912][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.328882][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.341325][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.360254][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.375498][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.393436][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.402289][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.438028][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.447637][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.457740][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.466452][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.496918][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.523282][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.532709][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.541707][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.555510][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.574500][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.584824][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.591950][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.613591][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.623040][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.630153][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.662570][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.673217][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.692768][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.699867][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.734395][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.741500][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.758096][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.774127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.781254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.792155][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.802056][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.809145][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.826164][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.847372][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.857794][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.892944][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.908044][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.915181][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.927435][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.940865][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.947978][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.961161][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.976156][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.992580][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.999786][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.027856][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.034958][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.051000][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.089394][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.112867][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.181455][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.228097][ T3299] veth0_vlan: entered promiscuous mode [ 35.244570][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.269150][ T3299] veth1_vlan: entered promiscuous mode [ 35.327763][ T3299] veth0_macvtap: entered promiscuous mode [ 35.346663][ T3299] veth1_macvtap: entered promiscuous mode [ 35.378141][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.406766][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.414855][ T3301] veth0_vlan: entered promiscuous mode [ 35.435789][ T3305] veth0_vlan: entered promiscuous mode [ 35.443411][ T3301] veth1_vlan: entered promiscuous mode [ 35.457337][ T270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.467022][ T270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.481685][ T3309] veth0_vlan: entered promiscuous mode [ 35.487473][ T3300] veth0_vlan: entered promiscuous mode [ 35.493438][ T270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.502316][ T270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.516848][ T3301] veth0_macvtap: entered promiscuous mode [ 35.525027][ T3305] veth1_vlan: entered promiscuous mode [ 35.533864][ T3309] veth1_vlan: entered promiscuous mode [ 35.544738][ T3301] veth1_macvtap: entered promiscuous mode [ 35.552864][ T3300] veth1_vlan: entered promiscuous mode [ 35.569827][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.586452][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 35.586467][ T29] audit: type=1400 audit(1754723484.290:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.tGj7F0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.607511][ T3300] veth0_macvtap: entered promiscuous mode [ 35.616814][ T29] audit: type=1400 audit(1754723484.290:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.625083][ T3305] veth0_macvtap: entered promiscuous mode [ 35.644624][ T29] audit: type=1400 audit(1754723484.290:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.tGj7F0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.653098][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.675542][ T29] audit: type=1400 audit(1754723484.290:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.688743][ T3309] veth0_macvtap: entered promiscuous mode [ 35.704543][ T29] audit: type=1400 audit(1754723484.290:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.tGj7F0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.726068][ T3300] veth1_macvtap: entered promiscuous mode [ 35.736978][ T29] audit: type=1400 audit(1754723484.290:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.tGj7F0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.752724][ T3305] veth1_macvtap: entered promiscuous mode [ 35.770160][ T29] audit: type=1400 audit(1754723484.290:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.791929][ T3309] veth1_macvtap: entered promiscuous mode [ 35.795441][ T29] audit: type=1400 audit(1754723484.290:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.807060][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.823897][ T29] audit: type=1400 audit(1754723484.290:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=4674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.860507][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.876686][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.884658][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.895837][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.901391][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.917796][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.931966][ T29] audit: type=1400 audit(1754723484.630:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.957975][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.968216][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.984549][ T270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.994908][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.006850][ T270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.030816][ T270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.041526][ T270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.060236][ T270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.076611][ T270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.115418][ T270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.124910][ T3476] Zero length message leads to an empty skb [ 36.132359][ T270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.160319][ T270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.188890][ T270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.205555][ T270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.252136][ T270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.284279][ T270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.317814][ T3497] syz.1.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.363574][ T3505] openvswitch: netlink: Message has 6 unknown bytes. [ 36.466759][ T3517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 36.667756][ T3544] Illegal XDP return value 4294967274 on prog (id 27) dev N/A, expect packet loss! [ 36.676384][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.685290][ T3546] netlink: 'syz.0.26': attribute type 16 has an invalid length. [ 36.693075][ T3546] netlink: 'syz.0.26': attribute type 17 has an invalid length. [ 36.696448][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.714180][ T3549] loop2: detected capacity change from 0 to 128 [ 36.771120][ T3554] program syz.2.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.861066][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.876962][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.926647][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.933857][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.993918][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.001059][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.165324][ T3572] loop4: detected capacity change from 0 to 32768 [ 37.383845][ T3611] loop4: detected capacity change from 0 to 1764 [ 37.402056][ T3611] ======================================================= [ 37.402056][ T3611] WARNING: The mand mount option has been deprecated and [ 37.402056][ T3611] and is ignored by this kernel. Remove the mand [ 37.402056][ T3611] option from the mount to silence this warning. [ 37.402056][ T3611] ======================================================= [ 37.497467][ T3623] IPVS: stopping master sync thread 3626 ... [ 37.503994][ T3626] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 37.573805][ T3630] SELinux: policydb version 0 does not match my version range 15-35 [ 37.599407][ T3630] SELinux: failed to load policy [ 37.685242][ T3638] loop0: detected capacity change from 0 to 8192 [ 38.263761][ T3685] bond1: entered promiscuous mode [ 38.269052][ T3685] bond1: entered allmulticast mode [ 38.276331][ T3685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.305662][ T3693] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 38.316007][ T3685] bond1 (unregistering): Released all slaves [ 38.602079][ T3736] batadv_slave_1: entered promiscuous mode [ 38.637776][ T3734] batadv_slave_1: left promiscuous mode [ 38.647172][ T3735] ALSA: seq fatal error: cannot create timer (-19) [ 38.660665][ T3741] process 'syz.4.111' launched './file0' with NULL argv: empty string added [ 38.860304][ T3768] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 38.899237][ T3774] netlink: 'syz.1.126': attribute type 21 has an invalid length. [ 38.909093][ T3774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.126'. [ 38.979706][ T3787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.034000][ T3791] loop3: detected capacity change from 0 to 512 [ 39.057843][ T3787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.079310][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.111799][ T3791] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.149209][ T3787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.162099][ T3791] EXT4-fs (loop3): shut down requested (1) [ 39.202272][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.252584][ T3787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.316414][ T3453] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.340843][ T121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.360578][ T121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.378399][ T121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.868043][ T3816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'. [ 39.969339][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 40.165129][ T3844] syzkaller1: entered promiscuous mode [ 40.170678][ T3844] syzkaller1: entered allmulticast mode [ 40.345720][ T3858] geneve2: entered promiscuous mode [ 40.351052][ T3858] geneve2: entered allmulticast mode [ 40.517848][ T3871] loop1: detected capacity change from 0 to 1024 [ 40.535016][ T3871] EXT4-fs: inline encryption not supported [ 40.543813][ T3871] EXT4-fs: Ignoring removed bh option [ 40.549460][ T3871] /dev/loop1: Can't open blockdev [ 40.670954][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 40.670987][ T29] audit: type=1400 audit(1754723489.380:416): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.776705][ T29] audit: type=1326 audit(1754723489.480:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.822717][ T29] audit: type=1326 audit(1754723489.480:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.846162][ T29] audit: type=1326 audit(1754723489.510:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.847679][ T3892] netlink: 96 bytes leftover after parsing attributes in process `syz.3.176'. [ 40.869947][ T29] audit: type=1326 audit(1754723489.510:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.901992][ T29] audit: type=1326 audit(1754723489.510:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.925244][ T29] audit: type=1326 audit(1754723489.510:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.948885][ T29] audit: type=1326 audit(1754723489.510:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.972420][ T29] audit: type=1326 audit(1754723489.510:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 40.995754][ T29] audit: type=1326 audit(1754723489.510:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 41.103636][ T3895] syz.2.177 (3895) used greatest stack depth: 10960 bytes left [ 41.521374][ T3939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.197'. [ 41.615143][ T10] IPVS: starting estimator thread 0... [ 41.708381][ T3949] IPVS: using max 2352 ests per chain, 117600 per kthread [ 41.762997][ T3969] loop4: detected capacity change from 0 to 512 [ 41.800478][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.815246][ T3969] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.888062][ T3300] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 41.903923][ T3300] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 41.977953][ T3990] loop3: detected capacity change from 0 to 1024 [ 41.986112][ T3990] EXT4-fs: Ignoring removed orlov option [ 41.994572][ T3990] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.011310][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.045656][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.110842][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.123321][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.151774][ T3300] syz-executor (3300) used greatest stack depth: 10720 bytes left [ 42.167501][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.196705][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 42.261316][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.316405][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.379805][ T4038] netlink: 2 bytes leftover after parsing attributes in process `syz.0.237'. [ 42.394708][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 42.421814][ T4040] vxlan0: entered promiscuous mode [ 42.440260][ T3453] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.452869][ T3453] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.470829][ T3453] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.480826][ T3453] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.489960][ T151] bridge_slave_1: left allmulticast mode [ 42.495744][ T151] bridge_slave_1: left promiscuous mode [ 42.501599][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.509825][ T151] bridge_slave_0: left allmulticast mode [ 42.515524][ T151] bridge_slave_0: left promiscuous mode [ 42.521365][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.651054][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.661219][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.671139][ T151] bond0 (unregistering): Released all slaves [ 42.762841][ T151] hsr_slave_0: left promiscuous mode [ 42.779138][ T151] hsr_slave_1: left promiscuous mode [ 42.797454][ T4079] loop1: detected capacity change from 0 to 512 [ 42.805130][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.812582][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.828924][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.836447][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.847251][ T151] veth1_macvtap: left promiscuous mode [ 42.853045][ T151] veth0_macvtap: left promiscuous mode [ 42.858923][ T151] veth1_vlan: left promiscuous mode [ 42.864354][ T151] veth0_vlan: left promiscuous mode [ 42.882303][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.910642][ T4079] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.016090][ T4079] syz.1.245 (4079) used greatest stack depth: 10376 bytes left [ 43.024911][ T151] team0 (unregistering): Port device team_slave_1 removed [ 43.025211][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.041301][ T151] team0 (unregistering): Port device team_slave_0 removed [ 43.043189][ T4094] SELinux: ebitmap: truncated map [ 43.059393][ T4094] SELinux: failed to load policy [ 43.105501][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 43.128564][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 43.239926][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.247123][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.268026][ T4024] bridge_slave_0: entered allmulticast mode [ 43.280075][ T4024] bridge_slave_0: entered promiscuous mode [ 43.302077][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.309311][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.337258][ T4024] bridge_slave_1: entered allmulticast mode [ 43.344006][ T4024] bridge_slave_1: entered promiscuous mode [ 43.398483][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.440115][ T4136] loop2: detected capacity change from 0 to 256 [ 43.440707][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.549456][ T4144] loop3: detected capacity change from 0 to 128 [ 43.567508][ T4024] team0: Port device team_slave_0 added [ 43.589002][ T4144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.603154][ T4024] team0: Port device team_slave_1 added [ 43.633499][ T4144] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.681757][ T4155] mmap: syz.0.257 (4155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.695768][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.702830][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.728836][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.765155][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.772360][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.798462][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.845428][ T4024] hsr_slave_0: entered promiscuous mode [ 43.864313][ T4024] hsr_slave_1: entered promiscuous mode [ 43.872624][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.979742][ T4174] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 44.008735][ T4178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4178 comm=syz.3.268 [ 44.021182][ T4178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4178 comm=syz.3.268 [ 44.096826][ T4184] loop1: detected capacity change from 0 to 512 [ 44.109573][ T4024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.125318][ T4024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.135445][ T4189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.142023][ T4184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.176367][ T4024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.193888][ T4024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.273604][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.348150][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.385792][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.411707][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.418855][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.459024][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.466134][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.685830][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.949538][ T4286] loop1: detected capacity change from 0 to 512 [ 44.987749][ T4286] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.009909][ T4286] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.290: invalid indirect mapped block 8 (level 2) [ 45.051072][ T4286] EXT4-fs (loop1): Remounting filesystem read-only [ 45.065953][ T4024] veth0_vlan: entered promiscuous mode [ 45.067847][ T4286] EXT4-fs (loop1): 1 truncate cleaned up [ 45.080269][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.092063][ T4024] veth1_vlan: entered promiscuous mode [ 45.169982][ T4024] veth0_macvtap: entered promiscuous mode [ 45.182356][ T4024] veth1_macvtap: entered promiscuous mode [ 45.197265][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.230076][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.282661][ T4311] syz_tun: entered promiscuous mode [ 45.317011][ T4314] ALSA: seq fatal error: cannot create timer (-19) [ 45.324740][ T4311] batadv_slave_0: entered promiscuous mode [ 45.340078][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 45.349209][ T4320] netlink: 312 bytes leftover after parsing attributes in process `syz.1.298'. [ 45.358377][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 45.360472][ T4311] hsr1: entered allmulticast mode [ 45.372296][ T4311] syz_tun: entered allmulticast mode [ 45.377604][ T4311] batadv_slave_0: entered allmulticast mode [ 45.461690][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.491439][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.524651][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.555553][ T4342] hub 9-0:1.0: USB hub found [ 45.566423][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.578684][ T4342] hub 9-0:1.0: 8 ports detected [ 45.596966][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.612596][ T4348] loop1: detected capacity change from 0 to 128 [ 45.673225][ T4348] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.753033][ T4360] netlink: 'syz.0.309': attribute type 2 has an invalid length. [ 45.760876][ T4360] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 45.768628][ T4360] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.309'. [ 45.776687][ T4348] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.836269][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 45.836287][ T29] audit: type=1400 audit(1754723494.540:608): avc: denied { setopt } for pid=4364 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.864475][ T29] audit: type=1400 audit(1754723494.570:609): avc: denied { create } for pid=4347 comm="syz.1.306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.906743][ T29] audit: type=1400 audit(1754723494.570:610): avc: denied { create } for pid=4347 comm="syz.1.306" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.978416][ T29] audit: type=1400 audit(1754723494.670:611): avc: denied { read } for pid=4364 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.047228][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.120231][ T29] audit: type=1326 audit(1754723494.820:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 46.143640][ T29] audit: type=1326 audit(1754723494.820:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 46.167063][ T29] audit: type=1326 audit(1754723494.820:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 46.176940][ T4378] loop2: detected capacity change from 0 to 4096 [ 46.190410][ T29] audit: type=1326 audit(1754723494.820:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 46.190446][ T29] audit: type=1326 audit(1754723494.820:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 46.422045][ T4393] loop5: detected capacity change from 0 to 1024 [ 46.429812][ T4378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.458422][ T29] audit: type=1400 audit(1754723494.830:617): avc: denied { setopt } for pid=4379 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.461729][ T4393] ext4: Unknown parameter 'uid<00000000000000000000' [ 46.525895][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 46.607096][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.142588][ T4404] loop3: detected capacity change from 0 to 32768 [ 47.156512][ T4442] loop2: detected capacity change from 0 to 1024 [ 47.175594][ T4442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.187965][ T4442] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.199641][ T4404] loop3: p1 p3 < > [ 47.245641][ T270] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.276953][ T270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.289476][ T270] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.289476][ T270] [ 47.333293][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.333397][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.355534][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.617734][ T4476] netlink: 'syz.2.349': attribute type 13 has an invalid length. [ 47.625753][ T4476] netlink: 'syz.2.349': attribute type 17 has an invalid length. [ 47.670373][ T4476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.773510][ T4482] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.919534][ T4497] SELinux: failed to load policy [ 47.995835][ T4516] netlink: 104 bytes leftover after parsing attributes in process `syz.0.368'. [ 48.150958][ T4539] syz.5.379 uses obsolete (PF_INET,SOCK_PACKET) [ 48.196687][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 48.205581][ T4544] netlink: 'syz.3.378': attribute type 15 has an invalid length. [ 48.208074][ T4548] capability: warning: `syz.2.383' uses 32-bit capabilities (legacy support in use) [ 48.213371][ T4544] netlink: 'syz.3.378': attribute type 18 has an invalid length. [ 48.237014][ T4544] vxlan0: entered promiscuous mode [ 48.244291][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.253892][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.262903][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.271890][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.335264][ T4557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.387'. [ 49.004049][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.013131][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.022490][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.060803][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.069849][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.079662][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.137384][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 49.169985][ T4613] loop5: detected capacity change from 0 to 512 [ 49.180332][ T4615] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 49.193827][ T4613] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.412: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.218587][ T4613] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.412: Bad quota inode: 3, type: 0 [ 49.231315][ T4619] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 49.244213][ T4613] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.262134][ T4613] EXT4-fs (loop5): mount failed [ 49.342702][ T4629] hub 9-0:1.0: USB hub found [ 49.350775][ T4631] bridge0: entered promiscuous mode [ 49.363527][ T4629] hub 9-0:1.0: 8 ports detected [ 49.368702][ T4631] bridge0: left promiscuous mode [ 49.645311][ T4673] netlink: 'syz.1.439': attribute type 11 has an invalid length. [ 49.676842][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.676880][ T4673] netlink: 'syz.1.439': attribute type 11 has an invalid length. [ 49.697071][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.706221][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.734994][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.987453][ T4714] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 50.020005][ T4714] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 50.290729][ T4751] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.327960][ T4751] SELinux: failed to load policy [ 50.511287][ T4778] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 50.557470][ T4782] vlan2: entered promiscuous mode [ 50.562708][ T4782] gretap0: entered promiscuous mode [ 50.672863][ T4794] netem: change failed [ 50.707304][ T4799] loop5: detected capacity change from 0 to 512 [ 50.714984][ T4799] EXT4-fs: Ignoring removed orlov option [ 50.742512][ T4799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.767993][ T4799] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.838898][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 50.838914][ T29] audit: type=1326 audit(1754723499.550:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.878547][ T29] audit: type=1326 audit(1754723499.550:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.901891][ T29] audit: type=1326 audit(1754723499.550:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.925228][ T29] audit: type=1326 audit(1754723499.550:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.948518][ T29] audit: type=1326 audit(1754723499.550:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.971960][ T29] audit: type=1326 audit(1754723499.580:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 50.995238][ T29] audit: type=1400 audit(1754723499.580:800): avc: denied { ioctl } for pid=4798 comm="syz.5.499" path="/39/bus/cpuset.effective_mems" dev="loop5" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.026146][ T29] audit: type=1326 audit(1754723499.730:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 51.049544][ T29] audit: type=1326 audit(1754723499.730:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 51.073605][ T29] audit: type=1326 audit(1754723499.780:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 51.074976][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.215719][ T4796] chnl_net:caif_netlink_parms(): no params data found [ 51.228878][ T4847] netlink: 'syz.0.514': attribute type 13 has an invalid length. [ 51.234447][ T4848] netlink: 'syz.1.513': attribute type 3 has an invalid length. [ 51.253412][ T4843] bridge0: entered promiscuous mode [ 51.261786][ T4843] bridge0: port 3(macsec1) entered blocking state [ 51.268441][ T4843] bridge0: port 3(macsec1) entered disabled state [ 51.277430][ T4843] macsec1: entered allmulticast mode [ 51.282938][ T4843] bridge0: entered allmulticast mode [ 51.290150][ T4843] macsec1: left allmulticast mode [ 51.295240][ T4843] bridge0: left allmulticast mode [ 51.301818][ T4843] bridge0: left promiscuous mode [ 51.368157][ T4847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.448021][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.455272][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.468263][ T4796] bridge_slave_0: entered allmulticast mode [ 51.474961][ T4796] bridge_slave_0: entered promiscuous mode [ 51.482140][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.489351][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.497149][ T4796] bridge_slave_1: entered allmulticast mode [ 51.503703][ T4796] bridge_slave_1: entered promiscuous mode [ 51.540545][ T4796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.581147][ T4796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.637000][ T4796] team0: Port device team_slave_0 added [ 51.647335][ T4796] team0: Port device team_slave_1 added [ 51.675469][ T4796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.682547][ T4796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.708568][ T4796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.744924][ T4796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.751961][ T4796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.777965][ T4796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.795393][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.803309][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.811119][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.819025][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.826904][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.834745][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.842732][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.850592][ T4899] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 51.900761][ T4796] hsr_slave_0: entered promiscuous mode [ 51.922250][ T4796] hsr_slave_1: entered promiscuous mode [ 51.928025][ T4887] loop3: detected capacity change from 0 to 32768 [ 51.930460][ T4796] debugfs: 'hsr0' already exists in 'hsr' [ 51.940388][ T4796] Cannot create hsr debugfs directory [ 51.970371][ T3293] loop3: p1 p3 < > [ 51.986149][ T4887] loop3: p1 p3 < > [ 52.016285][ T4913] loop1: detected capacity change from 0 to 1024 [ 52.044189][ T4913] EXT4-fs: Ignoring removed orlov option [ 52.050111][ T4913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.063377][ T4917] batman_adv: batadv0: Adding interface: dummy0 [ 52.069708][ T4917] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.107064][ T4917] batman_adv: batadv0: Interface activated: dummy0 [ 52.109085][ T4913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.157083][ T4923] loop3: detected capacity change from 0 to 128 [ 52.181972][ T4796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.184645][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 52.201210][ T4796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.201677][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 52.220520][ T4796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.231335][ T4796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.233598][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.277865][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 52.286852][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 52.371279][ T4796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.429841][ T4796] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.437118][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.437118][ T31] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 52.456562][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.463676][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.473429][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.473429][ T31] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 52.489254][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.496383][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.504591][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.504591][ T31] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 52.521183][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.521183][ T31] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 52.540052][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.540052][ T31] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 52.556689][ T4946] loop1: detected capacity change from 0 to 512 [ 52.566940][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.566940][ T31] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 52.582352][ T4946] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.591035][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.591035][ T31] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 52.604998][ T4946] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.553: bg 0: block 248: padding at end of block bitmap is not set [ 52.619783][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.619783][ T31] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 52.633414][ T4946] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.553: Failed to acquire dquot type 1 [ 52.645078][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.645078][ T31] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 52.660281][ T4946] EXT4-fs (loop1): 1 truncate cleaned up [ 52.666141][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.666141][ T31] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 52.680591][ T4946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.718050][ T4946] syz.1.553 (4946) used greatest stack depth: 9280 bytes left [ 52.737417][ T4796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.762468][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.868011][ T4975] loop5: detected capacity change from 0 to 512 [ 52.887258][ T4975] EXT4-fs (loop5): bad s_min_extra_isize: 65528 [ 52.926308][ T4975] SELinux: Context system_u:object is not valid (left unmapped). [ 53.035461][ T4796] veth0_vlan: entered promiscuous mode [ 53.049021][ T4796] veth1_vlan: entered promiscuous mode [ 53.055721][ T4995] __nla_validate_parse: 11 callbacks suppressed [ 53.055775][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 53.077661][ T4995] vxlan0: entered promiscuous mode [ 53.085381][ T3453] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.103877][ T3453] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.129348][ T4796] veth0_macvtap: entered promiscuous mode [ 53.155113][ T3453] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.165186][ T4796] veth1_macvtap: entered promiscuous mode [ 53.172411][ T51] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.187576][ T4796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.214800][ T4999] loop3: detected capacity change from 0 to 256 [ 53.222464][ T4796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.224632][ T5003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.571'. [ 53.242068][ T3453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.265158][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.291380][ T3453] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.326928][ T3453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.331776][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 53.389647][ T5014] loop6: detected capacity change from 0 to 512 [ 53.402117][ T5018] loop1: detected capacity change from 0 to 1024 [ 53.416944][ T5014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.424188][ T5018] EXT4-fs: Ignoring removed orlov option [ 53.450860][ T5018] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 53.481433][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.539837][ T4796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.555495][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.597170][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.606235][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.632371][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.641375][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.684765][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.693797][ T5033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.843326][ T5063] loop3: detected capacity change from 0 to 512 [ 53.855071][ T5063] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 54.042037][ T5084] loop5: detected capacity change from 0 to 4096 [ 54.054778][ T5088] loop3: detected capacity change from 0 to 512 [ 54.069958][ T5084] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.107287][ T5084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.122546][ T5088] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.603: Failed to acquire dquot type 1 [ 54.150455][ T5088] EXT4-fs (loop3): 1 truncate cleaned up [ 54.156559][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.180263][ T5088] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.254972][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.324270][ T5105] SELinux: Context Ü is not valid (left unmapped). [ 54.441159][ T5116] capability: warning: `syz.0.614' uses deprecated v2 capabilities in a way that may be insecure [ 55.758509][ T5136] loop6: detected capacity change from 0 to 512 [ 55.770799][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.785837][ T5136] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.620: Failed to acquire dquot type 1 [ 55.811384][ T5136] EXT4-fs (loop6): 1 truncate cleaned up [ 55.827562][ T5136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.840282][ T5136] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.855646][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 55.855664][ T29] audit: type=1400 audit(1754723504.560:925): avc: denied { create } for pid=5147 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.856290][ T5148] lo speed is unknown, defaulting to 1000 [ 55.863495][ T29] audit: type=1400 audit(1754723504.560:926): avc: denied { write } for pid=5147 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.921713][ T29] audit: type=1400 audit(1754723504.630:927): avc: denied { read } for pid=5153 comm="+}[@" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.956863][ T5148] lo speed is unknown, defaulting to 1000 [ 55.966533][ T29] audit: type=1326 audit(1754723504.670:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 55.989914][ T29] audit: type=1326 audit(1754723504.670:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.013374][ T29] audit: type=1326 audit(1754723504.670:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.015696][ T5148] lo speed is unknown, defaulting to 1000 [ 56.036631][ T29] audit: type=1326 audit(1754723504.670:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.036670][ T29] audit: type=1326 audit(1754723504.670:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.073357][ T5148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.092747][ T29] audit: type=1326 audit(1754723504.750:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.112923][ T5148] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 56.119430][ T29] audit: type=1326 audit(1754723504.750:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5158 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 56.160787][ T5148] lo speed is unknown, defaulting to 1000 [ 56.166985][ T5148] lo speed is unknown, defaulting to 1000 [ 56.192667][ T5148] lo speed is unknown, defaulting to 1000 [ 56.209242][ T5148] lo speed is unknown, defaulting to 1000 [ 56.219609][ T4796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.234427][ T5148] lo speed is unknown, defaulting to 1000 [ 56.260949][ T5148] lo speed is unknown, defaulting to 1000 [ 56.280150][ T5169] loop5: detected capacity change from 0 to 1024 [ 56.322887][ T5169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.597642][ T5223] loop3: detected capacity change from 0 to 1024 [ 56.604493][ T5218] hub 9-0:1.0: USB hub found [ 56.607246][ T5169] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 56.624019][ T5218] hub 9-0:1.0: 8 ports detected [ 56.630497][ T5224] lo speed is unknown, defaulting to 1000 [ 56.636842][ T5223] EXT4-fs: Ignoring removed orlov option [ 56.642658][ T5223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.718700][ T5223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.737349][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.784794][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.312411][ T5317] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.322898][ T5317] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.351679][ T5319] loop6: detected capacity change from 0 to 1024 [ 57.364218][ T5319] EXT4-fs: Ignoring removed orlov option [ 57.370074][ T5319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.403958][ T5319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.417987][ T5317] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.428474][ T5317] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.474307][ T5317] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.484686][ T5317] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.524601][ T4796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.585868][ T5317] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.596301][ T5317] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.686953][ T151] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.695306][ T151] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.713674][ T5356] geneve0: entered promiscuous mode [ 57.719010][ T5356] geneve0: entered allmulticast mode [ 57.772547][ T151] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.780862][ T151] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.800318][ T151] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.808813][ T151] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817497][ T151] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.825781][ T151] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.014845][ T5385] loop5: detected capacity change from 0 to 1024 [ 58.056421][ T5385] EXT4-fs: Ignoring removed orlov option [ 58.062263][ T5385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.080204][ T5391] geneve2: entered promiscuous mode [ 58.085491][ T5391] geneve2: entered allmulticast mode [ 58.159225][ T5397] pimreg: entered allmulticast mode [ 58.175751][ T5385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.188837][ T5397] pimreg: left allmulticast mode [ 58.327368][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.386288][ T5422] netlink: 'syz.5.694': attribute type 2 has an invalid length. [ 58.394029][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.694'. [ 58.451736][ T5418] lo speed is unknown, defaulting to 1000 [ 58.478768][ T5428] batman_adv: batadv0: Adding interface: dummy0 [ 58.485105][ T5428] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.578781][ T5428] batman_adv: batadv0: Interface activated: dummy0 [ 58.624013][ T5403] loop3: detected capacity change from 0 to 32768 [ 58.650355][ T5433] net_ratelimit: 66 callbacks suppressed [ 58.650375][ T5433] batadv0: mtu less than device minimum [ 58.662180][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.672982][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.683621][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.694555][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.705370][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.716268][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.727271][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.738324][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.749150][ T5433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.778886][ T3293] loop3: p1 p3 < > [ 58.786861][ T5403] loop3: p1 p3 < > [ 58.797387][ T5443] loop6: detected capacity change from 0 to 128 [ 58.870537][ T5443] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.909498][ T5452] geneve2: entered promiscuous mode [ 58.914809][ T5452] geneve2: entered allmulticast mode [ 58.922639][ T5443] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.997420][ T5458] loop3: detected capacity change from 0 to 2048 [ 59.088503][ T3293] Alternate GPT is invalid, using primary GPT. [ 59.094935][ T3293] loop3: p2 p3 p7 [ 59.135402][ T4796] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.156892][ T5458] Alternate GPT is invalid, using primary GPT. [ 59.163557][ T5458] loop3: p2 p3 p7 [ 59.188723][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.273946][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.280697][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.372431][ T5479] syzkaller1: entered promiscuous mode [ 59.377952][ T5479] syzkaller1: entered allmulticast mode [ 59.392604][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 59.395030][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.410360][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.471121][ T5476] lo speed is unknown, defaulting to 1000 [ 59.482488][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.484815][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.519107][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 59.567378][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.657053][ T5461] loop5: detected capacity change from 0 to 32768 [ 59.702352][ T5492] loop3: detected capacity change from 0 to 1024 [ 59.748829][ T3571] loop5: p1 p3 < > [ 59.756894][ T5492] EXT4-fs: Ignoring removed nobh option [ 59.772959][ T5461] loop5: p1 p3 < > [ 59.790818][ T5492] EXT4-fs: Ignoring removed bh option [ 59.820072][ T5492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.875419][ T5492] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 59.965110][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.120615][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.129563][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.138474][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.208408][ T5514] loop3: detected capacity change from 0 to 512 [ 60.245074][ T5514] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 60.289950][ T5514] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.727: invalid indirect mapped block 8 (level 2) [ 60.350788][ T5514] EXT4-fs (loop3): Remounting filesystem read-only [ 60.422595][ T5514] EXT4-fs (loop3): 1 truncate cleaned up [ 60.450393][ T5514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.474517][ T5524] lo speed is unknown, defaulting to 1000 [ 60.558756][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.579489][ T5536] siw: device registration error -23 [ 60.797159][ T5557] lo speed is unknown, defaulting to 1000 [ 60.885546][ T5567] lo speed is unknown, defaulting to 1000 [ 60.886026][ T5569] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.925399][ T5565] infiniband syz1: set active [ 60.930221][ T5565] infiniband syz1: added bond0 [ 60.932472][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 60.932490][ T29] audit: type=1326 audit(1754723509.640:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 60.981641][ T29] audit: type=1326 audit(1754723509.680:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7315414a5 code=0x7ffc0000 [ 60.989283][ T5565] RDS/IB: syz1: added [ 61.019077][ T5565] smc: adding ib device syz1 with port count 1 [ 61.025668][ T5565] smc: ib device syz1 port 1 has pnetid [ 61.118884][ T29] audit: type=1326 audit(1754723509.830:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 61.152332][ T29] audit: type=1326 audit(1754723509.860:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 61.175865][ T29] audit: type=1326 audit(1754723509.860:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 61.199264][ T29] audit: type=1326 audit(1754723509.860:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 61.493884][ T5637] loop5: detected capacity change from 0 to 512 [ 61.538835][ T5637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.627574][ T5637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.650630][ T5637] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.682920][ T5669] loop3: detected capacity change from 0 to 1024 [ 61.721518][ T5669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.794506][ T5672] lo speed is unknown, defaulting to 1000 [ 61.803294][ T5669] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.822048][ T5682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.772'. [ 61.834232][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.955434][ T5651] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:48: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.990483][ T5685] loop5: detected capacity change from 0 to 128 [ 62.023199][ T5685] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.052792][ T5651] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 62.065258][ T5651] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.065258][ T5651] [ 62.086925][ T5689] bridge0: entered promiscuous mode [ 62.088487][ T5685] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.100159][ T5689] bridge0: port 3(macsec1) entered blocking state [ 62.108901][ T5689] bridge0: port 3(macsec1) entered disabled state [ 62.126235][ T5689] macsec1: entered allmulticast mode [ 62.131684][ T5689] bridge0: entered allmulticast mode [ 62.152069][ T5689] macsec1: left allmulticast mode [ 62.153859][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.157244][ T5689] bridge0: left allmulticast mode [ 62.191988][ T5689] bridge0: left promiscuous mode [ 62.206414][ C1] hrtimer: interrupt took 36827 ns [ 62.323439][ T5703] netlink: 'syz.3.774': attribute type 13 has an invalid length. [ 62.331282][ T5703] netlink: 'syz.3.774': attribute type 17 has an invalid length. [ 62.350811][ T4024] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.432617][ T3388] lo speed is unknown, defaulting to 1000 [ 62.451305][ T29] audit: type=1326 audit(1754723511.160:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 62.498059][ T5721] bond1: entered promiscuous mode [ 62.503202][ T5721] bond1: entered allmulticast mode [ 62.511788][ T5721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.523272][ T5721] bond1 (unregistering): Released all slaves [ 62.530984][ T29] audit: type=1326 audit(1754723511.180:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 62.554502][ T29] audit: type=1326 audit(1754723511.180:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 62.554495][ T5717] loop6: detected capacity change from 0 to 1024 [ 62.554568][ T29] audit: type=1326 audit(1754723511.180:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e776debe9 code=0x7ffc0000 [ 62.611675][ T5717] EXT4-fs: inline encryption not supported [ 62.617737][ T5717] EXT4-fs: Ignoring removed bh option [ 62.624709][ T5717] /dev/loop6: Can't open blockdev [ 62.716589][ T5737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.794'. [ 62.877845][ T5761] netlink: 'syz.6.800': attribute type 13 has an invalid length. [ 62.885694][ T5761] netlink: 'syz.6.800': attribute type 17 has an invalid length. [ 62.938203][ T5763] SELinux: failed to load policy [ 62.954360][ T5769] random: crng reseeded on system resumption [ 63.000704][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.807'. [ 63.009853][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.807'. [ 63.021195][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.807'. [ 63.030257][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.807'. [ 63.101392][ T5785] loop3: detected capacity change from 0 to 1024 [ 63.113893][ T5785] EXT4-fs: inline encryption not supported [ 63.133122][ T5785] EXT4-fs: Ignoring removed bh option [ 63.141467][ T5785] /dev/loop3: Can't open blockdev [ 63.174715][ T5794] loop6: detected capacity change from 0 to 256 [ 63.227952][ T3571] printk: udevd: 7 output lines suppressed due to ratelimiting [ 63.256470][ T5803] syzkaller1: entered promiscuous mode [ 63.262037][ T5803] syzkaller1: entered allmulticast mode [ 63.635082][ T5863] loop5: detected capacity change from 0 to 2048 [ 63.700787][ T5863] Alternate GPT is invalid, using primary GPT. [ 63.707239][ T5863] loop5: p2 p3 p7 [ 63.792819][ T5881] loop5: detected capacity change from 0 to 1024 [ 63.817360][ T5881] EXT4-fs: Ignoring removed orlov option [ 63.857296][ T5881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.913994][ T5881] __nla_validate_parse: 3 callbacks suppressed [ 63.914015][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 64.001703][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.034105][ T5900] netlink: 'syz.0.864': attribute type 3 has an invalid length. [ 64.074874][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.084459][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.105025][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.115441][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.146507][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.155553][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 64.248559][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 64.372827][ T5944] net_ratelimit: 12 callbacks suppressed [ 64.372846][ T5944] openvswitch: netlink: Message has 6 unknown bytes. [ 64.411186][ T5948] loop5: detected capacity change from 0 to 1024 [ 64.421575][ T5948] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.435055][ T5948] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.887: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.437257][ T5950] syzkaller1: entered promiscuous mode [ 64.455776][ T5950] syzkaller1: entered allmulticast mode [ 64.464913][ T5948] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.887: Failed to acquire dquot type 0 [ 64.489228][ T5955] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 64.500936][ T5948] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.887: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.516439][ T5948] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.887: Invalid inode bitmap blk 0 in block_group 0 [ 64.518262][ T5959] 9pnet: p9_errstr2errno: server reported unknown error tat [ 64.531343][ T5948] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 64.538043][ T270] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.545520][ T5948] EXT4-fs (loop5): 1 orphan inode deleted [ 64.565798][ T5948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.573454][ T5955] team0: Port device dummy0 added [ 64.592879][ T270] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 64.615697][ T5948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.667565][ T5963] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 64.718183][ T5970] bridge0: entered promiscuous mode [ 64.724958][ T5970] bridge0: port 3(macsec1) entered blocking state [ 64.731572][ T5970] bridge0: port 3(macsec1) entered disabled state [ 64.738421][ T5970] macsec1: entered allmulticast mode [ 64.743740][ T5970] bridge0: entered allmulticast mode [ 64.756576][ T5971] loop3: detected capacity change from 0 to 1024 [ 64.771474][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.781990][ T5970] macsec1: left allmulticast mode [ 64.788727][ T5970] bridge0: left allmulticast mode [ 64.811997][ T5970] bridge0: left promiscuous mode [ 64.822174][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.944831][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.904'. [ 64.978664][ T5987] loop3: detected capacity change from 0 to 128 [ 64.999199][ T5966] Set syz1 is full, maxelem 65536 reached [ 65.014924][ T5987] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 65.022838][ T5987] FAT-fs (loop3): Filesystem has been set read-only [ 65.035187][ T5987] bio_check_eod: 102 callbacks suppressed [ 65.035205][ T5987] syz.3.898: attempt to access beyond end of device [ 65.035205][ T5987] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 65.055059][ T5987] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 65.062997][ T5987] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 65.104935][ T5999] bond1: entered promiscuous mode [ 65.110222][ T5999] bond1: entered allmulticast mode [ 65.116710][ T5999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.152331][ T5999] bond1 (unregistering): Released all slaves [ 65.169767][ T6006] loop6: detected capacity change from 0 to 2048 [ 65.182103][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.914'. [ 65.195805][ T6011] rdma_op ffff88811fd2e980 conn xmit_rdma 0000000000000000 [ 65.218943][ T6006] loop6: p1 < > p4 [ 65.226411][ T6006] loop6: p4 size 8388608 extends beyond EOD, truncated [ 65.320189][ T6025] bond1: entered promiscuous mode [ 65.325291][ T6025] bond1: entered allmulticast mode [ 65.356024][ T6025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.369918][ T6025] bond1 (unregistering): Released all slaves [ 65.460664][ T6049] rdma_rxe: rxe_newlink: failed to add bond0 [ 65.521398][ T6055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6055 comm=syz.1.936 [ 65.643029][ T6074] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 65.649604][ T6074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.657169][ T6074] vhci_hcd vhci_hcd.0: Device attached [ 65.688396][ T6075] vhci_hcd: connection closed [ 65.688607][ T270] vhci_hcd: stop threads [ 65.697605][ T270] vhci_hcd: release socket [ 65.702134][ T270] vhci_hcd: disconnect device [ 65.732832][ T6082] rdma_rxe: rxe_newlink: failed to add bond0 [ 66.081865][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 66.081882][ T29] audit: type=1326 audit(1754723514.790:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.3.973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20ce24ebe9 code=0x0 [ 66.208271][ T6146] loop5: detected capacity change from 0 to 164 [ 66.217793][ T6146] Unable to read rock-ridge attributes [ 66.226117][ T29] audit: type=1400 audit(1754723514.930:1155): avc: denied { mount } for pid=6145 comm="syz.5.977" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.251296][ T6146] Unable to read rock-ridge attributes [ 66.326516][ T29] audit: type=1326 audit(1754723514.950:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.350287][ T29] audit: type=1326 audit(1754723514.950:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.375762][ T29] audit: type=1326 audit(1754723514.950:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.399901][ T29] audit: type=1400 audit(1754723514.970:1159): avc: denied { unmount } for pid=4024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.452407][ T6157] vhci_hcd: invalid port number 96 [ 66.457597][ T6157] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 66.611679][ T29] audit: type=1326 audit(1754723515.320:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.650286][ T29] audit: type=1326 audit(1754723515.320:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.673969][ T29] audit: type=1326 audit(1754723515.320:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.697436][ T29] audit: type=1326 audit(1754723515.320:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 66.739394][ T6184] loop5: detected capacity change from 0 to 512 [ 66.750286][ T6184] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 66.766336][ T6184] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.995: invalid indirect mapped block 8 (level 2) [ 66.784961][ T6184] EXT4-fs (loop5): Remounting filesystem read-only [ 66.792456][ T6184] EXT4-fs (loop5): 1 truncate cleaned up [ 66.800054][ T6184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.814018][ T6188] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 66.822363][ T6188] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 66.917224][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.061378][ T6232] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.162981][ T6240] vlan2: entered allmulticast mode [ 67.168172][ T6240] bond0: entered allmulticast mode [ 67.173400][ T6240] bond_slave_0: entered allmulticast mode [ 67.179165][ T6240] bond_slave_1: entered allmulticast mode [ 67.475834][ T6270] SELinux: ebitmap: truncated map [ 67.482277][ T6270] SELinux: failed to load policy [ 67.488818][ T6279] loop5: detected capacity change from 0 to 1024 [ 67.495679][ T6279] EXT4-fs: Ignoring removed orlov option [ 67.512866][ T6279] program syz.5.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.568120][ T6286] loop6: detected capacity change from 0 to 8192 [ 67.577304][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.584683][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.711732][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.736248][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.746636][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.758875][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.823265][ T3363] lo speed is unknown, defaulting to 1000 [ 67.829127][ T3363] syz0: Port: 1 Link DOWN [ 67.835179][ T5609] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.844363][ T5609] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.911934][ T5609] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.921001][ T5609] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.978054][ T5609] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.987056][ T5609] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.032671][ T5609] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.041644][ T5609] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.386374][ T6345] loop5: detected capacity change from 0 to 512 [ 68.418514][ T6347] IPv6: Can't replace route, no match found [ 68.427454][ T6345] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.439444][ T6345] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1055: bad orphan inode 13 [ 68.460128][ T6345] ext4_test_bit(bit=12, block=18) = 1 [ 68.465907][ T6345] is_bad_inode(inode)=0 [ 68.470294][ T6345] NEXT_ORPHAN(inode)=2130706432 [ 68.475190][ T6345] max_ino=32 [ 68.478481][ T6345] i_nlink=1 [ 68.523014][ T6345] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 68.550212][ T6361] vhci_hcd: invalid port number 255 [ 68.578828][ T6345] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1055: bg 0: block 248: padding at end of block bitmap is not set [ 68.594318][ T6345] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1055: Failed to acquire dquot type 1 [ 68.621846][ T6345] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.677641][ T6345] syz.5.1055 (6345) used greatest stack depth: 9248 bytes left [ 69.046880][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.054425][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.066735][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.074361][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.081830][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.089266][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.096728][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.104291][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.111717][ T6291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.128896][ T6291] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.171645][ T6400] Set syz1 is full, maxelem 65536 reached [ 69.297136][ T6419] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 69.305502][ T6419] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 69.322125][ T6423] batadv_slave_1: entered promiscuous mode [ 69.342647][ T6425] __nla_validate_parse: 10 callbacks suppressed [ 69.342667][ T6425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'. [ 69.360249][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 69.369230][ T6420] batadv_slave_1: left promiscuous mode [ 69.660427][ T6450] serio: Serial port ptm0 [ 69.697796][ T6456] binfmt_misc: register: failed to install interpreter file ./file2 [ 70.081702][ T6486] loop6: detected capacity change from 0 to 1024 [ 70.089328][ T6486] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.105199][ T6486] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.1115: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.120448][ T6486] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1115: Failed to acquire dquot type 0 [ 70.138981][ T6486] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1115: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.160436][ T6486] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1115: Invalid inode bitmap blk 0 in block_group 0 [ 70.176411][ T6486] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 70.180133][ T5609] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.199728][ T5609] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 70.217688][ T6486] EXT4-fs (loop6): 1 orphan inode deleted [ 70.226942][ T6486] EXT4-fs mount: 4 callbacks suppressed [ 70.226961][ T6486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.304620][ T6498] infiniband syz!: set active [ 70.308003][ T6486] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.309423][ T6498] infiniband syz!: added team_slave_0 [ 70.407986][ T6498] RDS/IB: syz!: added [ 70.417367][ T6498] smc: adding ib device syz! with port count 1 [ 70.423818][ T6498] smc: ib device syz! port 1 has pnetid [ 70.715400][ T6512] Set syz1 is full, maxelem 65536 reached [ 70.772344][ T6530] loop3: detected capacity change from 0 to 1024 [ 70.784652][ T6530] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.795676][ T6530] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.841700][ T6530] JBD2: no valid journal superblock found [ 70.847660][ T6530] EXT4-fs (loop3): Could not load journal inode [ 70.879386][ T6530] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 70.979949][ T3388] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.043043][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 71.165298][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 71.165311][ T29] audit: type=1326 audit(1754723519.870:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.196139][ T29] audit: type=1326 audit(1754723519.880:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.219684][ T29] audit: type=1326 audit(1754723519.880:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.243268][ T29] audit: type=1326 audit(1754723519.880:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.266983][ T29] audit: type=1326 audit(1754723519.880:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.290474][ T29] audit: type=1326 audit(1754723519.880:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.314170][ T29] audit: type=1326 audit(1754723519.880:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.337643][ T29] audit: type=1326 audit(1754723519.880:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.361079][ T29] audit: type=1326 audit(1754723519.880:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.384532][ T29] audit: type=1326 audit(1754723519.880:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.0.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73150ebe9 code=0x7ffc0000 [ 71.567598][ T6611] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 71.954646][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 72.027955][ T6634] loop6: detected capacity change from 0 to 1024 [ 72.070097][ T6634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.118564][ T6634] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.217302][ T6642] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1184'. [ 72.279986][ T4796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.303223][ T6648] smc: net device bond0 applied user defined pnetid SYZ2 [ 72.311771][ T6648] smc: net device bond0 erased user defined pnetid SYZ2 [ 72.621438][ T6689] netlink: 'syz.1.1207': attribute type 21 has an invalid length. [ 72.629861][ T6689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1207'. [ 72.727242][ T6704] wireguard0: entered promiscuous mode [ 72.732979][ T6704] wireguard0: entered allmulticast mode [ 72.877019][ T6716] vhci_hcd: invalid port number 96 [ 72.882229][ T6716] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 72.896771][ T6723] loop5: detected capacity change from 0 to 512 [ 72.907735][ T6723] EXT4-fs: Ignoring removed nobh option [ 72.917760][ T6724] bridge_slave_0: left allmulticast mode [ 72.923596][ T6724] bridge_slave_0: left promiscuous mode [ 72.929409][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.941334][ T6723] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1222: iget: bad i_size value: 38620345925642 [ 72.954856][ T6723] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1222: couldn't read orphan inode 15 (err -117) [ 72.967679][ T6723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.968540][ T6724] bridge_slave_1: left allmulticast mode [ 72.985911][ T6724] bridge_slave_1: left promiscuous mode [ 72.991641][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.011270][ T6724] bond0: (slave bond_slave_0): Releasing backup interface [ 73.025864][ T6724] bond0: (slave bond_slave_1): Releasing backup interface [ 73.038948][ T6724] team0: Port device team_slave_0 removed [ 73.051491][ T6724] team0: Port device team_slave_1 removed [ 73.059140][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.066660][ T6724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.078658][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.086099][ T6724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.153001][ T6728] vlan0: entered promiscuous mode [ 73.172638][ T6728] team0: Port device vlan0 added [ 73.249823][ T6740] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 73.257603][ T6740] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1227'. [ 73.313509][ T5609] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 73.339425][ T5609] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 73.351707][ T5609] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.351707][ T5609] [ 73.361457][ T5609] EXT4-fs (loop5): Total free blocks count 0 [ 73.367527][ T5609] EXT4-fs (loop5): Free/Dirty block details [ 73.373473][ T5609] EXT4-fs (loop5): free_blocks=0 [ 73.378498][ T5609] EXT4-fs (loop5): dirty_blocks=8 [ 73.383565][ T5609] EXT4-fs (loop5): Block reservation details [ 73.389586][ T5609] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 73.419308][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.516267][ T6772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1241'. [ 73.631303][ T6789] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 73.679384][ T6789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.707125][ T6797] bond1: (slave geneve0): making interface the new active one [ 73.716554][ T6797] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 73.767096][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 73.959302][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.966550][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.992632][ T6817] batman_adv: batadv0: Interface deactivated: dummy0 [ 74.027649][ T6827] loop5: detected capacity change from 0 to 128 [ 74.045666][ T6827] FAT-fs (loop5): Directory bread(block 162) failed [ 74.045670][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.050190][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.068446][ T6827] FAT-fs (loop5): Directory bread(block 163) failed [ 74.084997][ T6827] FAT-fs (loop5): Directory bread(block 164) failed [ 74.092117][ T6827] FAT-fs (loop5): Directory bread(block 165) failed [ 74.099167][ T6827] FAT-fs (loop5): Directory bread(block 166) failed [ 74.105916][ T6827] FAT-fs (loop5): Directory bread(block 167) failed [ 74.112810][ T6827] FAT-fs (loop5): Directory bread(block 168) failed [ 74.119611][ T6827] FAT-fs (loop5): Directory bread(block 169) failed [ 74.126834][ T5609] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.136087][ T5609] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.137158][ T6827] FAT-fs (loop5): Directory bread(block 162) failed [ 74.151672][ T6827] FAT-fs (loop5): Directory bread(block 163) failed [ 74.168802][ T5609] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.190980][ T5609] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.329078][ T6848] syzkaller1: entered promiscuous mode [ 74.334688][ T6848] syzkaller1: entered allmulticast mode [ 74.341573][ T6850] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.533079][ T6870] syzkaller1: entered promiscuous mode [ 74.538942][ T6870] syzkaller1: entered allmulticast mode [ 74.586162][ T6878] loop3: detected capacity change from 0 to 1024 [ 74.593173][ T6878] EXT4-fs: Ignoring removed nobh option [ 74.598841][ T6878] EXT4-fs: inline encryption not supported [ 74.612010][ T6882] lo speed is unknown, defaulting to 1000 [ 74.622515][ T6878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.657976][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.695132][ T6878] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1287: Allocating blocks 497-513 which overlap fs metadata [ 74.701597][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.720840][ T6878] EXT4-fs (loop3): pa ffff88810730c230: logic 256, phys. 385, len 8 [ 74.728913][ T6878] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 74.801527][ T3301] syz_tun (unregistering): left promiscuous mode [ 74.813936][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.835239][ T6899] loop3: detected capacity change from 0 to 512 [ 74.850065][ T6899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.863245][ T6899] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.882609][ T6902] SELinux: failed to load policy [ 74.889487][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.967898][ T6910] unsupported nla_type 52263 [ 75.074072][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.081432][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.097087][ T6913] batman_adv: batadv0: Interface deactivated: dummy0 [ 75.140125][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.152003][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.198137][ T5609] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.206832][ T5609] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.216884][ T5609] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.225281][ T5609] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.261721][ T5609] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.270188][ T5609] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.279124][ T5609] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.287501][ T5609] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.436362][ T6924] vhci_hcd: invalid port number 96 [ 75.441679][ T6924] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 75.792853][ T6939] ipvlan2: entered promiscuous mode [ 75.799886][ T6939] bridge0: port 3(ipvlan2) entered blocking state [ 75.806440][ T6939] bridge0: port 3(ipvlan2) entered disabled state [ 75.814936][ T6939] ipvlan2: entered allmulticast mode [ 75.820352][ T6939] bridge0: entered allmulticast mode [ 75.826949][ T6939] ipvlan2: left allmulticast mode [ 75.832094][ T6939] bridge0: left allmulticast mode [ 75.916485][ T6953] hub 6-0:1.0: USB hub found [ 75.922808][ T6953] hub 6-0:1.0: 8 ports detected [ 76.147557][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.155013][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.171336][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 76.171352][ T29] audit: type=1400 audit(1754723524.880:1454): avc: denied { setopt } for pid=6969 comm="syz.6.1328" lport=39451 faddr=::ffff:172.20.20.24 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.173726][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 76.246505][ T29] audit: type=1400 audit(1754723524.950:1455): avc: denied { module_request } for pid=6989 comm="syz.1.1335" kmod="nft-expr-7-dup" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.255628][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.279692][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.336245][ T29] audit: type=1400 audit(1754723525.040:1456): avc: denied { mount } for pid=6994 comm="syz.1.1336" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.360202][ T29] audit: type=1400 audit(1754723525.040:1457): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.401498][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.413338][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.424551][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.435080][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.454459][ T29] audit: type=1326 audit(1754723525.140:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.477993][ T29] audit: type=1326 audit(1754723525.140:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.501502][ T29] audit: type=1326 audit(1754723525.140:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.525345][ T29] audit: type=1326 audit(1754723525.140:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.548907][ T29] audit: type=1326 audit(1754723525.140:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.572323][ T29] audit: type=1326 audit(1754723525.140:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdaecabebe9 code=0x7ffc0000 [ 76.711539][ T7018] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.756302][ T7024] lo speed is unknown, defaulting to 1000 [ 76.793799][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.804945][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.027014][ T7050] netlink: 'syz.6.1362': attribute type 6 has an invalid length. [ 77.041044][ T7046] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.055207][ T7046] vhci_hcd: invalid port number 129 [ 77.060512][ T7046] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 77.412235][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 77.461266][ T7068] ref_ctr_offset mismatch. inode: 0x487 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 77.477733][ T7062] SELinux: ebitmap start bit (1633759333) is not a multiple of the map unit size (64) [ 77.489021][ T7062] SELinux: failed to load policy [ 77.578925][ T7075] 9pnet_fd: Insufficient options for proto=fd [ 77.691206][ T7082] batadv_slave_0: entered promiscuous mode [ 77.697261][ T5631] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.706268][ T5631] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.717903][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 77.734656][ T7086] loop3: detected capacity change from 0 to 512 [ 77.744383][ T7082] batadv_slave_0 (unregistering): left promiscuous mode [ 77.751813][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.759916][ T7086] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.773162][ T7086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.786127][ T5631] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.795204][ T5631] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.805921][ T7086] EXT4-fs (loop3): 1 truncate cleaned up [ 77.814908][ T5631] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.820028][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.823936][ T5631] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.834222][ T5631] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.853776][ T5631] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.864397][ T7086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.900011][ T7098] loop5: detected capacity change from 0 to 512 [ 77.949202][ T7084] lo speed is unknown, defaulting to 1000 [ 77.956983][ T7098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.972312][ T7098] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.985749][ T7111] batadv_slave_1: entered promiscuous mode [ 77.994473][ T7111] batadv0: entered promiscuous mode [ 78.000409][ T7110] batadv0: left promiscuous mode [ 78.005508][ T7110] batadv_slave_1: left promiscuous mode [ 78.027104][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.062043][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 78.140139][ T31] bridge_slave_1: left allmulticast mode [ 78.146054][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.154307][ T31] bridge_slave_0: left allmulticast mode [ 78.160031][ T31] bridge_slave_0: left promiscuous mode [ 78.165700][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.180112][ T7121] loop5: detected capacity change from 0 to 1024 [ 78.186734][ T7121] EXT4-fs: Ignoring removed orlov option [ 78.199073][ T7121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.212217][ T31] bond1 (unregistering): (slave geneve0): Releasing active interface [ 78.301697][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.312791][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.327163][ T31] bond0 (unregistering): Released all slaves [ 78.336545][ T31] bond1 (unregistering): Released all slaves [ 78.345180][ T7084] chnl_net:caif_netlink_parms(): no params data found [ 78.400338][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.407456][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.414788][ T7084] bridge_slave_0: entered allmulticast mode [ 78.422090][ T7084] bridge_slave_0: entered promiscuous mode [ 78.428962][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.436163][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.445076][ T7084] bridge_slave_1: entered allmulticast mode [ 78.461901][ T7084] bridge_slave_1: entered promiscuous mode [ 78.485971][ T31] batadv_slave_0: left promiscuous mode [ 78.487291][ T4024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.507683][ T31] hsr_slave_0: left promiscuous mode [ 78.520801][ T31] hsr_slave_1: left promiscuous mode [ 78.527749][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.537765][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.548893][ T31] batman_adv: batadv0: Removing interface: dummy0 [ 78.598860][ T31] team0 (unregistering): Port device team_slave_1 removed [ 78.622116][ T31] team0 (unregistering): Port device team_slave_0 removed [ 78.632771][ T5631] smc: removing ib device syz! [ 78.705004][ T7150] loop3: detected capacity change from 0 to 2048 [ 78.727303][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.760458][ T7150] loop3: p1 < > p3 p4 [ 78.770640][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.790426][ T7150] loop3: p3 size 54016 extends beyond EOD, truncated [ 78.801118][ T7150] loop3: p4 start 4294967295 is beyond EOD, truncated [ 78.837775][ T7084] team0: Port device team_slave_0 added [ 78.865408][ T7084] team0: Port device team_slave_1 added [ 78.931281][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.938327][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.964360][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.009552][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.016585][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.042584][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.113423][ T7084] hsr_slave_0: entered promiscuous mode [ 79.121901][ T7084] hsr_slave_1: entered promiscuous mode [ 79.127778][ T7084] debugfs: 'hsr0' already exists in 'hsr' [ 79.133550][ T7084] Cannot create hsr debugfs directory [ 79.150806][ T31] IPVS: stop unused estimator thread 0... [ 79.305814][ T7084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.325985][ T7084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.345331][ T7084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.364465][ T7084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.390119][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.400335][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.446992][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.464595][ T7084] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.475740][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.482870][ T5609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.495396][ T7195] pimreg: entered allmulticast mode [ 79.505694][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.512844][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.529163][ T7195] pimreg: left allmulticast mode [ 79.606366][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.672805][ T7207] SELinux: ebitmap start bit (1633759333) is not a multiple of the map unit size (64) [ 79.682953][ T7207] SELinux: failed to load policy [ 79.754929][ T7225] program syz.6.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.829661][ T7236] 9pnet_fd: Insufficient options for proto=fd [ 79.830927][ T7084] veth0_vlan: entered promiscuous mode [ 79.851219][ T7084] veth1_vlan: entered promiscuous mode [ 79.870589][ T7084] veth0_macvtap: entered promiscuous mode [ 79.879029][ T7084] veth1_macvtap: entered promiscuous mode [ 79.910868][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.923523][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.933299][ T5609] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.963071][ T5609] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.968240][ T7251] loop5: detected capacity change from 0 to 512 [ 79.982564][ T270] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.991436][ T7251] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.014018][ T270] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.027443][ T7251] EXT4-fs (loop5): 1 truncate cleaned up [ 80.046553][ T7251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.075255][ T7260] lo speed is unknown, defaulting to 1000 [ 80.127751][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.147698][ T7251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.158619][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.192162][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.215917][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.354798][ T7283] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 80.493230][ T7306] loop6: detected capacity change from 0 to 1024 [ 80.508614][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1460'. [ 80.517770][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.525355][ T7308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.536900][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.536960][ T7306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.544406][ T7308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.716138][ T7324] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1466'. [ 80.747021][ T7306] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 80.831101][ T4796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.862825][ T7341] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1472'. [ 80.862876][ T7338] tipc: Started in network mode [ 80.876525][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1472'. [ 80.876892][ T7338] tipc: Node identity ac14140f, cluster identity 4711 [ 80.911510][ T7338] tipc: New replicast peer: 255.255.255.255 [ 80.917664][ T7338] tipc: Enabled bearer , priority 10 [ 80.975163][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.983791][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.018360][ C1] ================================================================== [ 81.026494][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 81.033696][ C1] [ 81.036015][ C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0: [ 81.044257][ C1] wq_worker_tick+0x60/0x230 [ 81.048866][ C1] sched_tick+0x11a/0x270 [ 81.053219][ C1] update_process_times+0x15f/0x190 [ 81.058441][ C1] tick_nohz_handler+0x249/0x2d0 [ 81.063382][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 81.068588][ C1] hrtimer_interrupt+0x21a/0x460 [ 81.073564][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 81.079479][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 81.085121][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.091111][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 81.096156][ C1] process_scheduled_works+0x486/0x9d0 [ 81.101629][ C1] worker_thread+0x582/0x770 [ 81.106234][ C1] kthread+0x486/0x510 [ 81.110305][ C1] ret_from_fork+0xda/0x150 [ 81.114813][ C1] ret_from_fork_asm+0x1a/0x30 [ 81.119589][ C1] [ 81.121912][ C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1: [ 81.129979][ C1] wq_worker_tick+0x60/0x230 [ 81.134572][ C1] sched_tick+0x11a/0x270 [ 81.138911][ C1] update_process_times+0x15f/0x190 [ 81.144145][ C1] tick_nohz_handler+0x249/0x2d0 [ 81.149094][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 81.154297][ C1] hrtimer_interrupt+0x21a/0x460 [ 81.159243][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 81.165158][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 81.170800][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.176789][ C1] __tsan_unaligned_write1+0x14/0x180 [ 81.182207][ C1] tty_put_char+0x2f/0xc0 [ 81.186556][ C1] __process_echoes+0x309/0x6b0 [ 81.191447][ C1] n_tty_receive_buf_common+0x8e4/0xbe0 [ 81.197058][ C1] n_tty_receive_buf2+0x33/0x40 [ 81.201927][ C1] tty_ldisc_receive_buf+0x63/0xf0 [ 81.207141][ C1] tty_port_default_receive_buf+0x59/0x90 [ 81.212880][ C1] flush_to_ldisc+0x145/0x340 [ 81.217572][ C1] process_scheduled_works+0x4ce/0x9d0 [ 81.223066][ C1] worker_thread+0x582/0x770 [ 81.227689][ C1] kthread+0x486/0x510 [ 81.231783][ C1] ret_from_fork+0xda/0x150 [ 81.236290][ C1] ret_from_fork_asm+0x1a/0x30 [ 81.241065][ C1] [ 81.243386][ C1] value changed: 0x00000000000aae60 -> 0x00000000000ad570 [ 81.250504][ C1] [ 81.252831][ C1] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.258996][ C1] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u8:31 Not tainted 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 81.271333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.281413][ C1] Workqueue: events_unbound flush_to_ldisc [ 81.287243][ C1] ================================================================== [ 81.654574][ T31] bridge_slave_1: left allmulticast mode [ 81.660289][ T31] bridge_slave_1: left promiscuous mode [ 81.665926][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.674004][ T31] bridge_slave_0: left allmulticast mode [ 81.679738][ T31] bridge_slave_0: left promiscuous mode [ 81.685405][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.731547][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.740394][ T31] bond_slave_0: left allmulticast mode [ 81.746519][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.755943][ T31] bond_slave_1: left allmulticast mode [ 81.761740][ T31] bond0 (unregistering): Released all slaves [ 81.821917][ T31] tipc: Disabling bearer [ 81.827166][ T31] tipc: Left network mode [ 81.847964][ T31] hsr_slave_0: left promiscuous mode [ 81.853770][ T31] hsr_slave_1: left promiscuous mode [ 81.859464][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.866946][ T31] batman_adv: batadv0: Removing interface: dummy0 [ 81.888182][ T31] team0 (unregistering): Port device team_slave_1 removed [ 81.898131][ T31] team0 (unregistering): Port device team_slave_0 removed [ 82.983570][ T31] bridge_slave_1: left allmulticast mode [ 82.989349][ T31] bridge_slave_1: left promiscuous mode [ 82.995077][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.002855][ T31] bridge_slave_0: left allmulticast mode [ 83.008544][ T31] bridge_slave_0: left promiscuous mode [ 83.014227][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.022717][ T31] bridge_slave_1: left allmulticast mode [ 83.028567][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.036354][ T31] bridge_slave_0: left allmulticast mode [ 83.042023][ T31] bridge_slave_0: left promiscuous mode [ 83.047726][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.140084][ T31] bond0 (unregistering): Released all slaves [ 83.181139][ T5657] smc: removing ib device syz1 [ 83.186264][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.195877][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.205122][ T31] bond0 (unregistering): Released all slaves [ 83.251350][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.260782][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.269822][ T31] bond0 (unregistering): Released all slaves [ 83.393199][ T31] hsr_slave_0: left promiscuous mode [ 83.401021][ T31] hsr_slave_1: left promiscuous mode [ 83.407496][ T31] hsr_slave_0: left promiscuous mode [ 83.414018][ T31] hsr_slave_1: left promiscuous mode [ 83.421090][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.428690][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.440612][ T31] hsr_slave_0: left promiscuous mode [ 83.446188][ T31] hsr_slave_1: left promiscuous mode [ 83.451990][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.459605][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.477990][ T31] team0 (unregistering): Port device vlan0 removed [ 83.538043][ T31] team0 (unregistering): Port device team_slave_1 removed [ 83.548906][ T31] team0 (unregistering): Port device team_slave_0 removed [ 83.574270][ T31] team0 (unregistering): Port device dummy0 removed [ 83.609249][ T31] team0 (unregistering): Port device team_slave_1 removed [ 83.618783][ T31] team0 (unregistering): Port device team_slave_0 removed [ 84.393318][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.451334][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.500957][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.561404][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.632823][ T31] bridge_slave_1: left allmulticast mode [ 84.638527][ T31] bridge_slave_1: left promiscuous mode [ 84.644249][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.652093][ T31] bridge_slave_0: left allmulticast mode [ 84.657732][ T31] bridge_slave_0: left promiscuous mode [ 84.663494][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.750195][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.760029][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.769836][ T31] bond0 (unregistering): Released all slaves [ 84.822180][ T31] hsr_slave_0: left promiscuous mode [ 84.827898][ T31] hsr_slave_1: left promiscuous mode [ 84.835986][ T31] veth1_macvtap: left promiscuous mode [ 84.841529][ T31] veth0_macvtap: left promiscuous mode [ 84.847046][ T31] veth1_vlan: left promiscuous mode [ 84.852349][ T31] veth0_vlan: left promiscuous mode [ 84.911496][ T31] team0 (unregistering): Port device team_slave_1 removed [ 84.920858][ T31] team0 (unregistering): Port device team_slave_0 removed