last executing test programs: 13.214456768s ago: executing program 2 (id=589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4ca1, 0x9, @mcast1, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x28) 13.14585809s ago: executing program 2 (id=590): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14) 13.14516773s ago: executing program 2 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13.054255781s ago: executing program 2 (id=596): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)=0x1ff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xd4) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x4) 12.804201475s ago: executing program 2 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x27c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_FLAGS={0x4, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x2a4}}, 0x4048010) 12.568708869s ago: executing program 2 (id=606): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) pipe(0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 12.52301s ago: executing program 32 (id=606): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) pipe(0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.445171436s ago: executing program 0 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1.422855827s ago: executing program 0 (id=951): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff0500040000002b0011000300686173683a69702c6d61726b00000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) 1.24521014s ago: executing program 0 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) close(0x3) r3 = epoll_create1(0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.24488617s ago: executing program 0 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 1.086102722s ago: executing program 1 (id=960): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400efffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.009628314s ago: executing program 1 (id=961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 845.195976ms ago: executing program 1 (id=963): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 734.524728ms ago: executing program 1 (id=964): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r1}, 0x38) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 573.12881ms ago: executing program 3 (id=965): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 473.084622ms ago: executing program 1 (id=966): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x6}}, 0x20) close(r0) 472.808482ms ago: executing program 1 (id=967): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040), 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 472.581602ms ago: executing program 3 (id=968): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 367.198264ms ago: executing program 3 (id=971): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1008000, &(0x7f0000000080)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xc}}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@fat=@nocase}]}, 0x1, 0x11c5, &(0x7f0000001240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x41513, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x4000003, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) 366.232113ms ago: executing program 5 (id=973): perf_event_open(&(0x7f0000000140)={0x2, 0x51, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) setrlimit(0x8, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 296.831055ms ago: executing program 4 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x3, 0xff, "0062ba7d820000000001001f820dac4eb71eed"}) r3 = syz_open_pts(r2, 0x800) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 282.989705ms ago: executing program 5 (id=976): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 261.160255ms ago: executing program 4 (id=977): io_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 227.125126ms ago: executing program 5 (id=978): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 157.189337ms ago: executing program 4 (id=979): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x7606, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) 157.022737ms ago: executing program 5 (id=980): io_uring_setup(0x7a51, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 143.544947ms ago: executing program 4 (id=981): unshare(0xa000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 121.331648ms ago: executing program 5 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 103.410458ms ago: executing program 3 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='inet_sock_set_state\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) 66.038048ms ago: executing program 4 (id=984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 46.189259ms ago: executing program 5 (id=985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000300)="ed", 0x1}], 0x1) 45.475139ms ago: executing program 0 (id=986): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(r2, r2) socket$inet(0x2, 0x2, 0x1) 44.872469ms ago: executing program 3 (id=987): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 19.88858ms ago: executing program 4 (id=988): write$nci(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1.276249ms ago: executing program 3 (id=989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) dup3(r2, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 34.067044][ T29] audit: type=1400 audit(1753145537.851:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.068241][ T3296] cgroup: Unknown subsys name 'net' [ 34.089825][ T29] audit: type=1400 audit(1753145537.851:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.117247][ T29] audit: type=1400 audit(1753145537.891:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.272687][ T3296] cgroup: Unknown subsys name 'cpuset' [ 34.278973][ T3296] cgroup: Unknown subsys name 'rlimit' [ 34.390557][ T29] audit: type=1400 audit(1753145538.171:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.414756][ T29] audit: type=1400 audit(1753145538.171:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.435298][ T29] audit: type=1400 audit(1753145538.181:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.444246][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.455699][ T29] audit: type=1400 audit(1753145538.181:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.484601][ T29] audit: type=1400 audit(1753145538.181:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.505891][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.509409][ T29] audit: type=1400 audit(1753145538.181:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.541322][ T29] audit: type=1400 audit(1753145538.261:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.657707][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.693125][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.725583][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.748633][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.762558][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.821592][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.828803][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.836073][ T3310] bridge_slave_0: entered allmulticast mode [ 35.842803][ T3310] bridge_slave_0: entered promiscuous mode [ 35.864642][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.871708][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.879018][ T3310] bridge_slave_1: entered allmulticast mode [ 35.885469][ T3310] bridge_slave_1: entered promiscuous mode [ 35.899589][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.906690][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.913943][ T3307] bridge_slave_0: entered allmulticast mode [ 35.920444][ T3307] bridge_slave_0: entered promiscuous mode [ 35.944526][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.951706][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.959019][ T3307] bridge_slave_1: entered allmulticast mode [ 35.965605][ T3307] bridge_slave_1: entered promiscuous mode [ 35.971846][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.979010][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.986162][ T3312] bridge_slave_0: entered allmulticast mode [ 35.992782][ T3312] bridge_slave_0: entered promiscuous mode [ 36.018351][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.025566][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.032833][ T3312] bridge_slave_1: entered allmulticast mode [ 36.039353][ T3312] bridge_slave_1: entered promiscuous mode [ 36.050231][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.057424][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.064651][ T3318] bridge_slave_0: entered allmulticast mode [ 36.071156][ T3318] bridge_slave_0: entered promiscuous mode [ 36.078614][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.088141][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.095238][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.102511][ T3318] bridge_slave_1: entered allmulticast mode [ 36.109010][ T3318] bridge_slave_1: entered promiscuous mode [ 36.126299][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.141199][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.155087][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.162221][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.169461][ T3306] bridge_slave_0: entered allmulticast mode [ 36.175952][ T3306] bridge_slave_0: entered promiscuous mode [ 36.182976][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.190118][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.197270][ T3306] bridge_slave_1: entered allmulticast mode [ 36.203683][ T3306] bridge_slave_1: entered promiscuous mode [ 36.210774][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.221179][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.255383][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.270050][ T3310] team0: Port device team_slave_0 added [ 36.277070][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.287318][ T3310] team0: Port device team_slave_1 added [ 36.308303][ T3307] team0: Port device team_slave_0 added [ 36.315154][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.330625][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.345834][ T3312] team0: Port device team_slave_0 added [ 36.352334][ T3307] team0: Port device team_slave_1 added [ 36.364463][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.373904][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.380865][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.406872][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.418265][ T3312] team0: Port device team_slave_1 added [ 36.443847][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.450833][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.476930][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.500808][ T3318] team0: Port device team_slave_0 added [ 36.507507][ T3318] team0: Port device team_slave_1 added [ 36.519384][ T3306] team0: Port device team_slave_0 added [ 36.525866][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.532917][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.558974][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.570179][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.577249][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.603194][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.614391][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.621420][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.647407][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.663769][ T3306] team0: Port device team_slave_1 added [ 36.675226][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.682274][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.708255][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.719359][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.726456][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.752521][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.784883][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.791876][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.817935][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.840477][ T3310] hsr_slave_0: entered promiscuous mode [ 36.846599][ T3310] hsr_slave_1: entered promiscuous mode [ 36.859351][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.866412][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.892412][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.903828][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.910803][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.936849][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.954984][ T3318] hsr_slave_0: entered promiscuous mode [ 36.960940][ T3318] hsr_slave_1: entered promiscuous mode [ 36.966815][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.974444][ T3318] Cannot create hsr debugfs directory [ 37.017873][ T3307] hsr_slave_0: entered promiscuous mode [ 37.024059][ T3307] hsr_slave_1: entered promiscuous mode [ 37.029873][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.037592][ T3307] Cannot create hsr debugfs directory [ 37.050573][ T3312] hsr_slave_0: entered promiscuous mode [ 37.056796][ T3312] hsr_slave_1: entered promiscuous mode [ 37.062622][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.070177][ T3312] Cannot create hsr debugfs directory [ 37.120310][ T3306] hsr_slave_0: entered promiscuous mode [ 37.126359][ T3306] hsr_slave_1: entered promiscuous mode [ 37.132480][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.140053][ T3306] Cannot create hsr debugfs directory [ 37.306044][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.314974][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.323623][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.334697][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.359322][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.368370][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.377390][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.388357][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.411288][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.427089][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.442839][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.451596][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.491238][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.500112][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.509782][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.524579][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.555832][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.568625][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.576056][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.585166][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.595618][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.618449][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.636067][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.651419][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.658586][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.669623][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.676796][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.689150][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.715312][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.722406][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.737445][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.746098][ T273] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.753261][ T273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.779133][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.789561][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.820769][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.845816][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.863157][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.870333][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.891850][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.899029][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.913646][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.930973][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.944504][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.951671][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.968159][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.975268][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.989090][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.003234][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.011554][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.034001][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.041273][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.050845][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.057959][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.084745][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.095328][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.145006][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.155559][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.181720][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.246309][ T3310] veth0_vlan: entered promiscuous mode [ 38.270509][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.283582][ T3310] veth1_vlan: entered promiscuous mode [ 38.308219][ T3310] veth0_macvtap: entered promiscuous mode [ 38.328011][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.341617][ T3310] veth1_macvtap: entered promiscuous mode [ 38.359715][ T3318] veth0_vlan: entered promiscuous mode [ 38.374589][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.397027][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.407509][ T3318] veth1_vlan: entered promiscuous mode [ 38.430161][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439007][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.447837][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.456717][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.470186][ T3312] veth0_vlan: entered promiscuous mode [ 38.500617][ T3307] veth0_vlan: entered promiscuous mode [ 38.507488][ T3312] veth1_vlan: entered promiscuous mode [ 38.531219][ T3307] veth1_vlan: entered promiscuous mode [ 38.545327][ T3318] veth0_macvtap: entered promiscuous mode [ 38.560241][ T3307] veth0_macvtap: entered promiscuous mode [ 38.568851][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.572577][ T3306] veth0_vlan: entered promiscuous mode [ 38.603188][ T3318] veth1_macvtap: entered promiscuous mode [ 38.617597][ T3307] veth1_macvtap: entered promiscuous mode [ 38.624244][ T3475] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 38.627401][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.647803][ T3306] veth1_vlan: entered promiscuous mode [ 38.655533][ T3312] veth0_macvtap: entered promiscuous mode [ 38.663150][ T3312] veth1_macvtap: entered promiscuous mode [ 38.675001][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.688608][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.704038][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.720360][ T3306] veth0_macvtap: entered promiscuous mode [ 38.726552][ T3477] syz.0.6 (3477) used greatest stack depth: 9376 bytes left [ 38.729290][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742917][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.751711][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.760621][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.773738][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.788792][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.797722][ T3306] veth1_macvtap: entered promiscuous mode [ 38.809196][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.818108][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.820444][ T3479] loop0: detected capacity change from 0 to 512 [ 38.826909][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.826953][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.829416][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859620][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.860862][ T3479] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 38.868461][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.879865][ T3479] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.7: invalid indirect mapped block 2683928664 (level 1) [ 38.885369][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.900729][ T3479] EXT4-fs (loop0): Remounting filesystem read-only [ 38.915733][ T3479] EXT4-fs (loop0): 1 truncate cleaned up [ 38.922842][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.941084][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.956894][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.968291][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.001232][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.010135][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.018922][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.027843][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.093952][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 39.093970][ T29] audit: type=1400 audit(1753145542.881:129): avc: denied { create } for pid=3484 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.151569][ T29] audit: type=1400 audit(1753145542.931:130): avc: denied { create } for pid=3484 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.171324][ T29] audit: type=1400 audit(1753145542.931:131): avc: denied { bind } for pid=3484 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.191083][ T29] audit: type=1400 audit(1753145542.931:132): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.225885][ T29] audit: type=1400 audit(1753145542.961:133): avc: denied { create } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.245105][ T29] audit: type=1400 audit(1753145542.961:134): avc: denied { open } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.264095][ T29] audit: type=1400 audit(1753145542.961:135): avc: denied { kernel } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.336425][ T29] audit: type=1400 audit(1753145543.081:136): avc: denied { create } for pid=3505 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.356063][ T29] audit: type=1400 audit(1753145543.081:137): avc: denied { connect } for pid=3505 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.375632][ T29] audit: type=1400 audit(1753145543.081:138): avc: denied { write } for pid=3505 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.473673][ T3512] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 39.512221][ T3423] IPVS: starting estimator thread 0... [ 39.549788][ T3526] loop3: detected capacity change from 0 to 256 [ 39.566867][ T3526] ======================================================= [ 39.566867][ T3526] WARNING: The mand mount option has been deprecated and [ 39.566867][ T3526] and is ignored by this kernel. Remove the mand [ 39.566867][ T3526] option from the mount to silence this warning. [ 39.566867][ T3526] ======================================================= [ 39.642329][ T3522] IPVS: using max 2496 ests per chain, 124800 per kthread [ 39.771204][ T3526] FAT-fs (loop3): Directory bread(block 64) failed [ 39.792418][ T3526] FAT-fs (loop3): Directory bread(block 65) failed [ 39.812078][ T3526] FAT-fs (loop3): Directory bread(block 66) failed [ 39.818668][ T3526] FAT-fs (loop3): Directory bread(block 67) failed [ 39.845844][ T3526] FAT-fs (loop3): Directory bread(block 68) failed [ 39.861216][ T3526] FAT-fs (loop3): Directory bread(block 69) failed [ 39.883138][ T3526] FAT-fs (loop3): Directory bread(block 70) failed [ 39.910169][ T3526] FAT-fs (loop3): Directory bread(block 71) failed [ 39.919619][ T3526] FAT-fs (loop3): Directory bread(block 72) failed [ 39.935547][ T3526] FAT-fs (loop3): Directory bread(block 73) failed [ 39.984250][ T3526] process 'syz.3.16' launched '/dev/fd/7' with NULL argv: empty string added [ 40.002538][ T3526] syz.3.16: attempt to access beyond end of device [ 40.002538][ T3526] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 40.028294][ T3526] syz.3.16: attempt to access beyond end of device [ 40.028294][ T3526] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 40.197467][ T3569] bridge: RTM_NEWNEIGH with invalid ether address [ 40.355677][ T3585] loop4: detected capacity change from 0 to 1024 [ 40.363540][ T3585] EXT4-fs: Ignoring removed bh option [ 40.398752][ T3585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 40.470667][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 40.649250][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 40.803962][ T3628] mmap: syz.0.59 (3628) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.915665][ C0] hrtimer: interrupt took 35382 ns [ 41.277421][ T3657] loop4: detected capacity change from 0 to 764 [ 41.289587][ T3659] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 41.301092][ T3659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.311355][ T3659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 41.353096][ T3662] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 41.360927][ T3662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.72'. [ 41.378908][ T3662] batadv0: entered promiscuous mode [ 41.384299][ T3662] batadv0: entered allmulticast mode [ 41.421216][ T3662] bond0: (slave batadv0): Releasing backup interface [ 41.443483][ T3662] bridge0: port 3(batadv0) entered blocking state [ 41.450105][ T3662] bridge0: port 3(batadv0) entered disabled state [ 41.462483][ T3457] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 41.471767][ T3457] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 41.531668][ T3674] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 41.588436][ T3678] netlink: 96 bytes leftover after parsing attributes in process `syz.2.80'. [ 41.614651][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 41.788145][ T2996] udevd[2996]: worker [3300] terminated by signal 33 (Unknown signal 33) [ 41.804658][ T2996] udevd[2996]: worker [3300] failed while handling '/devices/virtual/block/loop2' [ 41.842106][ T3696] loop4: detected capacity change from 0 to 764 [ 42.248304][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 42.288924][ T3727] vlan2: entered allmulticast mode [ 42.294216][ T3727] veth1_to_bridge: entered allmulticast mode [ 42.390741][ T3739] syz.0.109 uses obsolete (PF_INET,SOCK_PACKET) [ 42.413157][ T3745] SELinux: failed to load policy [ 42.465793][ T3753] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 42.532341][ T3753] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 42.591335][ T3765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.120'. [ 42.706209][ T3777] netlink: 'syz.4.127': attribute type 13 has an invalid length. [ 42.832044][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.839317][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.946639][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.957605][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.036623][ T3777] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.045764][ T3777] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.055012][ T3777] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.064177][ T3777] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.183853][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 43.205012][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 43.211536][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.239611][ T3814] tmpfs: Unknown parameter 'rootcontext' [ 43.317571][ T3814] loop3: detected capacity change from 0 to 1024 [ 43.342137][ T3814] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.363796][ T3814] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.133: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.393511][ T3814] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.133: Failed to acquire dquot type 0 [ 43.418636][ T3814] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.133: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.452341][ T3814] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.133: Invalid inode bitmap blk 0 in block_group 0 [ 43.474602][ T69] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.490252][ T3814] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 43.499264][ T3814] EXT4-fs (loop3): 1 orphan inode deleted [ 43.506263][ T69] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 43.518557][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.534943][ T3829] syz.4.139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.546330][ T3814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.623110][ T3833] loop4: detected capacity change from 0 to 2048 [ 43.664644][ T3833] loop4: p1 < > p4 [ 43.669749][ T3833] loop4: p4 size 8388608 extends beyond EOD, truncated [ 43.740589][ T3846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 43.798809][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 43.822937][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 44.632050][ T3903] unsupported nlmsg_type 40 [ 44.783140][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 44.783159][ T29] audit: type=1400 audit(1753145548.561:362): avc: denied { connect } for pid=3914 comm="syz.4.179" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.783355][ T29] audit: type=1400 audit(1753145548.571:363): avc: denied { write } for pid=3914 comm="syz.4.179" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.902874][ T3924] loop1: detected capacity change from 0 to 1024 [ 44.921116][ T3927] loop3: detected capacity change from 0 to 2048 [ 44.938578][ T3924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.952904][ T3921] syzkaller0: entered promiscuous mode [ 44.958416][ T3921] syzkaller0: entered allmulticast mode [ 44.966279][ T29] audit: type=1400 audit(1753145548.751:364): avc: denied { add_name } for pid=3923 comm="syz.1.184" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.987000][ T29] audit: type=1400 audit(1753145548.751:365): avc: denied { create } for pid=3923 comm="syz.1.184" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.011552][ T29] audit: type=1400 audit(1753145548.781:366): avc: denied { read write } for pid=3923 comm="syz.1.184" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.034133][ T29] audit: type=1400 audit(1753145548.781:367): avc: denied { open } for pid=3923 comm="syz.1.184" path="/39/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.039701][ T3924] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 45.069828][ T3924] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.069828][ T3924] [ 45.079667][ T3924] EXT4-fs (loop1): Total free blocks count 0 [ 45.085744][ T3924] EXT4-fs (loop1): Free/Dirty block details [ 45.091764][ T3924] EXT4-fs (loop1): free_blocks=0 [ 45.096828][ T3924] EXT4-fs (loop1): dirty_blocks=0 [ 45.098413][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.101864][ T3924] EXT4-fs (loop1): Block reservation details [ 45.120040][ T3924] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 45.130736][ T29] audit: type=1400 audit(1753145548.851:368): avc: denied { ioctl } for pid=3922 comm="syz.0.181" path="socket:[5909]" dev="sockfs" ino=5909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.212634][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.238813][ T29] audit: type=1326 audit(1753145549.021:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 45.254712][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.262200][ T29] audit: type=1326 audit(1753145549.021:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 45.294514][ T29] audit: type=1326 audit(1753145549.021:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 45.568270][ T3975] loop2: detected capacity change from 0 to 2048 [ 45.587153][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.709111][ T3998] __nla_validate_parse: 6 callbacks suppressed [ 45.709127][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 45.756860][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.791027][ T4005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 46.058884][ T4021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 46.295013][ T4047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.464013][ T4062] loop4: detected capacity change from 0 to 1024 [ 46.470833][ T4062] EXT4-fs: Ignoring removed bh option [ 46.476323][ T4062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.485267][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.587976][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.605141][ T4071] loop0: detected capacity change from 0 to 1024 [ 46.611855][ T4071] EXT4-fs: Ignoring removed bh option [ 46.617430][ T4071] EXT4-fs: Ignoring removed orlov option [ 46.623197][ T4071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.644530][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.680571][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.690039][ T4074] loop4: detected capacity change from 0 to 8192 [ 46.706843][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 46.722758][ T4080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.739895][ T4080] vlan2: entered allmulticast mode [ 46.745159][ T4080] bond1: entered allmulticast mode [ 46.893076][ T4101] loop4: detected capacity change from 0 to 1024 [ 46.900355][ T4101] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.911349][ T4101] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.923577][ T4101] JBD2: no valid journal superblock found [ 46.929358][ T4101] EXT4-fs (loop4): Could not load journal inode [ 46.951286][ T4101] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 46.957388][ T4104] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 46.968695][ T4104] netlink: 'syz.0.259': attribute type 9 has an invalid length. [ 46.976498][ T4104] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 46.984338][ T4104] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 46.992265][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 47.070269][ T4108] loop4: detected capacity change from 0 to 1024 [ 47.141468][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.201327][ T4183] Zero length message leads to an empty skb [ 47.227915][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.235997][ T4185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4185 comm=syz.1.269 [ 47.315562][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 47.524774][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 47.813415][ T4239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4239 comm=syz.3.293 [ 48.013907][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 48.056767][ T4253] netlink: 'syz.0.297': attribute type 13 has an invalid length. [ 48.126561][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.133809][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.155396][ T4257] serio: Serial port ptm0 [ 48.183319][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.193316][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.230931][ T4253] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.240200][ T4253] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.249256][ T4253] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.258248][ T4253] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.274244][ T4255] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.298'. [ 48.290767][ T4251] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.298'. [ 48.410028][ T4277] loop4: detected capacity change from 0 to 512 [ 48.428152][ T4277] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.307: bad orphan inode 15 [ 48.459925][ T4277] ext4_test_bit(bit=14, block=5) = 0 [ 48.467277][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.490251][ T4277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.570556][ T4299] bridge0: port 3(batadv0) entered disabled state [ 48.578689][ T4299] bridge_slave_1: left allmulticast mode [ 48.584560][ T4299] bridge_slave_1: left promiscuous mode [ 48.590492][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.617211][ T4299] bridge_slave_0: left allmulticast mode [ 48.622968][ T4299] bridge_slave_0: left promiscuous mode [ 48.628694][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.799544][ T4304] netlink: 'syz.3.319': attribute type 13 has an invalid length. [ 48.887747][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.898314][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.941647][ T4304] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.950839][ T4304] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.959893][ T4304] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.968895][ T4304] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.336210][ T4349] tipc: Started in network mode [ 49.341325][ T4349] tipc: Node identity 82b54f862e41, cluster identity 4711 [ 49.348664][ T4349] tipc: Enabled bearer , priority 0 [ 49.361146][ T4349] tipc: Disabling bearer [ 49.435592][ T273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.458300][ T4359] loop3: detected capacity change from 0 to 128 [ 49.486290][ T4359] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.521424][ T273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.532078][ T4359] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.581451][ T273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.644402][ T273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.729482][ T4399] vlan2: entered allmulticast mode [ 49.730816][ T4400] loop0: detected capacity change from 0 to 512 [ 49.734691][ T4399] macvtap0: entered allmulticast mode [ 49.747435][ T4400] EXT4-fs: Ignoring removed i_version option [ 49.754115][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.767553][ T4400] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.780604][ T4400] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.795054][ T4400] EXT4-fs (loop0): 1 truncate cleaned up [ 49.805839][ T273] bridge_slave_1: left allmulticast mode [ 49.807914][ T4400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.811525][ T273] bridge_slave_1: left promiscuous mode [ 49.829471][ T273] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.840493][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.842564][ T273] bridge_slave_0: left allmulticast mode [ 49.855420][ T273] bridge_slave_0: left promiscuous mode [ 49.861480][ T273] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.919474][ T4410] loop1: detected capacity change from 0 to 2048 [ 49.944217][ T4410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.981357][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.003211][ T4422] Cannot find del_set index 0 as target [ 50.009238][ T273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.020714][ T273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.030611][ T273] bond0 (unregistering): Released all slaves [ 50.042344][ T4420] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 50.074475][ T273] hsr_slave_0: left promiscuous mode [ 50.091181][ T273] hsr_slave_1: left promiscuous mode [ 50.104624][ T273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.112458][ T273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.123999][ T273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.131522][ T273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.139417][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 50.139429][ T29] audit: type=1400 audit(1753145553.931:612): avc: denied { write } for pid=4426 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.199693][ T273] veth1_macvtap: left promiscuous mode [ 50.206619][ T273] veth0_macvtap: left promiscuous mode [ 50.213926][ T273] veth1_vlan: left promiscuous mode [ 50.219285][ T273] veth0_vlan: left promiscuous mode [ 50.232919][ T4434] loop0: detected capacity change from 0 to 128 [ 50.253115][ T29] audit: type=1400 audit(1753145554.041:613): avc: denied { mount } for pid=4433 comm="syz.0.378" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.290572][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.326497][ T4440] loop3: detected capacity change from 0 to 128 [ 50.332934][ T29] audit: type=1400 audit(1753145554.111:614): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.386531][ T273] team0 (unregistering): Port device team_slave_1 removed [ 50.398297][ T273] team0 (unregistering): Port device team_slave_0 removed [ 50.454545][ T4443] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 50.515665][ T4450] loop4: detected capacity change from 0 to 2048 [ 50.528802][ T4452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.555047][ T4452] vlan2: entered allmulticast mode [ 50.560251][ T4452] bond1: entered allmulticast mode [ 50.571031][ T4450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.589456][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 50.633116][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.684766][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.691967][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.718914][ T4369] bridge_slave_0: entered allmulticast mode [ 50.725644][ T4369] bridge_slave_0: entered promiscuous mode [ 50.732534][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.739615][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.746904][ T4369] bridge_slave_1: entered allmulticast mode [ 50.753499][ T4369] bridge_slave_1: entered promiscuous mode [ 50.766343][ T29] audit: type=1400 audit(1753145554.551:615): avc: denied { create } for pid=4465 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.786492][ T29] audit: type=1400 audit(1753145554.551:616): avc: denied { write } for pid=4465 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.814855][ T4464] can0: slcan on ttyS3. [ 50.830519][ T4466] lo speed is unknown, defaulting to 1000 [ 50.840062][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.852068][ T4466] lo speed is unknown, defaulting to 1000 [ 50.858402][ T4466] lo speed is unknown, defaulting to 1000 [ 50.864289][ T4467] can0 (unregistered): slcan off ttyS3. [ 50.870425][ T4467] Falling back ldisc for ttyS3. [ 50.872730][ T4466] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.884209][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.895332][ T4466] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.917488][ T4369] team0: Port device team_slave_0 added [ 50.928282][ T4369] team0: Port device team_slave_1 added [ 50.935311][ T4466] lo speed is unknown, defaulting to 1000 [ 50.943851][ T4474] __nla_validate_parse: 9 callbacks suppressed [ 50.943865][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 50.967995][ T4466] lo speed is unknown, defaulting to 1000 [ 50.968772][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.980752][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.006774][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.025624][ T4466] lo speed is unknown, defaulting to 1000 [ 51.032580][ T4466] lo speed is unknown, defaulting to 1000 [ 51.038933][ T4466] lo speed is unknown, defaulting to 1000 [ 51.045765][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.052963][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.079116][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.167856][ T4369] hsr_slave_0: entered promiscuous mode [ 51.174345][ T4369] hsr_slave_1: entered promiscuous mode [ 51.181507][ T29] audit: type=1326 audit(1753145554.961:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 51.206317][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.207875][ T29] audit: type=1326 audit(1753145554.961:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 51.215942][ T4369] Cannot create hsr debugfs directory [ 51.237350][ T29] audit: type=1326 audit(1753145554.961:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 51.266084][ T29] audit: type=1326 audit(1753145554.961:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 51.290332][ T29] audit: type=1326 audit(1753145555.031:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 51.316229][ T4489] Cannot find del_set index 0 as target [ 51.345298][ T4495] loop3: detected capacity change from 0 to 512 [ 51.384424][ T4495] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.399: bad orphan inode 15 [ 51.399866][ T4495] ext4_test_bit(bit=14, block=5) = 0 [ 51.406075][ T4495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.468292][ T4495] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.708731][ T4536] IPVS: Error connecting to the multicast addr [ 51.764209][ T4369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.771258][ T4540] loop4: detected capacity change from 0 to 2048 [ 51.790149][ T4369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.814097][ T4369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.832532][ T4546] loop0: detected capacity change from 0 to 512 [ 51.844633][ T4546] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.420: iget: bogus i_mode (0) [ 51.857035][ T4546] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.420: couldn't read orphan inode 17 (err -117) [ 51.869615][ T4546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.870385][ T4369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.895180][ T4550] loop1: detected capacity change from 0 to 1024 [ 51.906783][ T4546] batman_adv: batadv0: Adding interface: ipvlan2 [ 51.913201][ T4546] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.914173][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.938638][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.938662][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.939128][ T4546] batman_adv: batadv0: Interface activated: ipvlan2 [ 51.974723][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.001758][ T4550] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.013254][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.038837][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.049724][ T4517] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.058736][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.071860][ T4517] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 52.084405][ T4517] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.084405][ T4517] [ 52.094160][ T4517] EXT4-fs (loop4): Total free blocks count 0 [ 52.100181][ T4517] EXT4-fs (loop4): Free/Dirty block details [ 52.106262][ T4517] EXT4-fs (loop4): free_blocks=2415919104 [ 52.112041][ T4517] EXT4-fs (loop4): dirty_blocks=32 [ 52.117208][ T4517] EXT4-fs (loop4): Block reservation details [ 52.123347][ T4517] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 52.124368][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.155367][ T4369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.165862][ T4369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.223350][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 52.233677][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.240827][ T4129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.243260][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.259535][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.266671][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.355462][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.427332][ T4596] loop4: detected capacity change from 0 to 256 [ 52.452420][ T4596] FAT-fs (loop4): Directory bread(block 64) failed [ 52.457571][ T4369] veth0_vlan: entered promiscuous mode [ 52.459113][ T4596] FAT-fs (loop4): Directory bread(block 65) failed [ 52.469479][ T4369] veth1_vlan: entered promiscuous mode [ 52.471396][ T4596] FAT-fs (loop4): Directory bread(block 66) failed [ 52.485482][ T4596] FAT-fs (loop4): Directory bread(block 67) failed [ 52.492148][ T4596] FAT-fs (loop4): Directory bread(block 68) failed [ 52.493859][ T4369] veth0_macvtap: entered promiscuous mode [ 52.498793][ T4596] FAT-fs (loop4): Directory bread(block 69) failed [ 52.508072][ T4369] veth1_macvtap: entered promiscuous mode [ 52.511189][ T4596] FAT-fs (loop4): Directory bread(block 70) failed [ 52.523553][ T4596] FAT-fs (loop4): Directory bread(block 71) failed [ 52.528080][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.530095][ T4596] FAT-fs (loop4): Directory bread(block 72) failed [ 52.541295][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.543999][ T4596] FAT-fs (loop4): Directory bread(block 73) failed [ 52.556683][ T4369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.566586][ T4369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.575519][ T4369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584375][ T4369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.619724][ T4596] syz.4.433: attempt to access beyond end of device [ 52.619724][ T4596] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 52.667631][ T4609] loop2: detected capacity change from 0 to 1024 [ 52.674993][ T4609] EXT4-fs: Ignoring removed orlov option [ 52.684034][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.714187][ T4369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.878328][ T4632] loop2: detected capacity change from 0 to 512 [ 52.885796][ T4632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.905834][ T4632] EXT4-fs (loop2): 1 truncate cleaned up [ 52.913469][ T4632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.949549][ T4369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.291009][ T4659] loop0: detected capacity change from 0 to 8192 [ 53.306848][ T4659] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.368942][ T4671] vhci_hcd: invalid port number 96 [ 53.374229][ T4671] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.502995][ T4691] loop3: detected capacity change from 0 to 128 [ 53.681443][ T4715] loop0: detected capacity change from 0 to 256 [ 53.697578][ T4717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.698000][ T4715] FAT-fs (loop0): Directory bread(block 64) failed [ 53.717251][ T4715] FAT-fs (loop0): Directory bread(block 65) failed [ 53.726026][ T4715] FAT-fs (loop0): Directory bread(block 66) failed [ 53.735054][ T4715] FAT-fs (loop0): Directory bread(block 67) failed [ 53.741773][ T4715] FAT-fs (loop0): Directory bread(block 68) failed [ 53.749290][ T4715] FAT-fs (loop0): Directory bread(block 69) failed [ 53.756063][ T4715] FAT-fs (loop0): Directory bread(block 70) failed [ 53.763207][ T4715] FAT-fs (loop0): Directory bread(block 71) failed [ 53.769999][ T4715] FAT-fs (loop0): Directory bread(block 72) failed [ 53.777203][ T4715] FAT-fs (loop0): Directory bread(block 73) failed [ 53.803350][ T4715] syz.0.485: attempt to access beyond end of device [ 53.803350][ T4715] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 53.807192][ T4724] loop1: detected capacity change from 0 to 1024 [ 53.823657][ T4724] EXT4-fs: Ignoring removed orlov option [ 53.831765][ T4724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.147897][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.160177][ T4746] rdma_op ffff8881023c2580 conn xmit_rdma 0000000000000000 [ 54.209452][ T4750] loop1: detected capacity change from 0 to 512 [ 54.218088][ T4750] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.498: iget: bogus i_mode (0) [ 54.231736][ T4750] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.498: couldn't read orphan inode 17 (err -117) [ 54.247845][ T4750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.279252][ T4750] batman_adv: batadv0: Adding interface: ipvlan2 [ 54.285692][ T4750] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.311223][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.321706][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.331793][ T4750] batman_adv: batadv0: Interface activated: ipvlan2 [ 54.368808][ T4760] lo speed is unknown, defaulting to 1000 [ 54.383377][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.432941][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.508'. [ 54.525807][ T4782] gtp0: entered promiscuous mode [ 54.570506][ T4790] program syz.1.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.678477][ T4793] loop3: detected capacity change from 0 to 512 [ 54.687960][ T4793] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #17: comm syz.3.518: iget: bogus i_mode (0) [ 54.711494][ T4798] loop0: detected capacity change from 0 to 1024 [ 54.720104][ T4798] EXT4-fs: Ignoring removed orlov option [ 54.727231][ T4793] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.518: couldn't read orphan inode 17 (err -117) [ 54.740278][ T4793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.761527][ T4793] batman_adv: batadv0: Adding interface: ipvlan2 [ 54.761886][ T4798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.767952][ T4793] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.805443][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.815931][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.826104][ T4793] batman_adv: batadv0: Interface activated: ipvlan2 [ 54.863778][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.878106][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.972075][ T4812] loop0: detected capacity change from 0 to 1024 [ 55.004232][ T4812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.031979][ T4812] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.079896][ T4815] loop3: detected capacity change from 0 to 2048 [ 55.093782][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.138885][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.153609][ T4808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.168733][ T4808] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 55.181226][ T4808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.181226][ T4808] [ 55.190954][ T4808] EXT4-fs (loop3): Total free blocks count 0 [ 55.197073][ T4808] EXT4-fs (loop3): Free/Dirty block details [ 55.203033][ T4808] EXT4-fs (loop3): free_blocks=2415919104 [ 55.208839][ T4808] EXT4-fs (loop3): dirty_blocks=32 [ 55.214053][ T4808] EXT4-fs (loop3): Block reservation details [ 55.220068][ T4808] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 55.263333][ T4821] Driver unsupported XDP return value 0 on prog (id 425) dev N/A, expect packet loss! [ 55.313122][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.337702][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 55.337720][ T29] audit: type=1326 audit(1753145559.121:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.376073][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 55.385066][ T4827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 55.394005][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 55.420000][ T29] audit: type=1326 audit(1753145559.151:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4d9f2d310 code=0x7ffc0000 [ 55.443693][ T29] audit: type=1326 audit(1753145559.151:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4d9f2d310 code=0x7ffc0000 [ 55.467212][ T29] audit: type=1326 audit(1753145559.151:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.490597][ T29] audit: type=1326 audit(1753145559.151:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.513838][ T29] audit: type=1326 audit(1753145559.151:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.537212][ T29] audit: type=1326 audit(1753145559.151:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.552439][ T4827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 55.560549][ T29] audit: type=1326 audit(1753145559.151:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 55.569426][ T4827] netlink: 'syz.2.531': attribute type 6 has an invalid length. [ 55.611424][ T4832] loop4: detected capacity change from 0 to 512 [ 55.638912][ T29] audit: type=1400 audit(1753145559.421:1179): avc: denied { listen } for pid=4834 comm="syz.0.542" lport=47712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.681099][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 55.692624][ T29] audit: type=1400 audit(1753145559.481:1180): avc: denied { accept } for pid=4834 comm="syz.0.542" lport=47712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.696001][ T4832] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.532: iget: bogus i_mode (0) [ 55.733880][ T4832] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.532: couldn't read orphan inode 17 (err -117) [ 55.745896][ T4840] bridge_slave_1: left allmulticast mode [ 55.751574][ T4840] bridge_slave_1: left promiscuous mode [ 55.757478][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.775778][ T4849] loop2: detected capacity change from 0 to 128 [ 55.782910][ T4849] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.796434][ T4849] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.825896][ T4832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.832201][ T4840] bridge_slave_0: left allmulticast mode [ 55.843920][ T4840] bridge_slave_0: left promiscuous mode [ 55.849729][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.858643][ T3457] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.906049][ T4832] batman_adv: batadv0: Adding interface: ipvlan2 [ 55.912609][ T4832] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.938047][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.948600][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.959046][ T4832] batman_adv: batadv0: Interface activated: ipvlan2 [ 55.991255][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.054151][ T4869] netlink: '+}[@': attribute type 2 has an invalid length. [ 56.128149][ T4878] loop1: detected capacity change from 0 to 1024 [ 56.137714][ T4878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.155728][ T4878] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.180438][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.203032][ T4882] loop4: detected capacity change from 0 to 8192 [ 56.215547][ T4883] loop0: detected capacity change from 0 to 2048 [ 56.233740][ T4883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.282103][ T4890] gtp0: entered promiscuous mode [ 56.285379][ T4867] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.311499][ T4867] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 56.324135][ T4867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.324135][ T4867] [ 56.333908][ T4867] EXT4-fs (loop0): Total free blocks count 0 [ 56.340257][ T4867] EXT4-fs (loop0): Free/Dirty block details [ 56.346435][ T4867] EXT4-fs (loop0): free_blocks=2415919104 [ 56.352212][ T4867] EXT4-fs (loop0): dirty_blocks=32 [ 56.357346][ T4867] EXT4-fs (loop0): Block reservation details [ 56.363412][ T4867] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 56.443775][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.488354][ T4910] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 56.488354][ T4910] program syz.2.562 not setting count and/or reply_len properly [ 56.506624][ T4913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 56.513333][ T4913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.520984][ T4913] vhci_hcd vhci_hcd.0: Device attached [ 56.538852][ T4914] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 56.546689][ T4170] vhci_hcd: stop threads [ 56.550997][ T4170] vhci_hcd: release socket [ 56.555568][ T4170] vhci_hcd: disconnect device [ 56.579094][ T4920] loop1: detected capacity change from 0 to 128 [ 56.586710][ T4920] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.601461][ T4920] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.637276][ T4170] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.705355][ T4938] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.752978][ T4947] netlink: 'syz.2.578': attribute type 17 has an invalid length. [ 56.760919][ T4947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.578'. [ 56.771292][ T4947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.775388][ T4949] loop3: detected capacity change from 0 to 1024 [ 56.797327][ T4949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.815338][ T4949] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.832125][ T4952] loop1: detected capacity change from 0 to 1024 [ 56.843940][ T4952] EXT4-fs: inline encryption not supported [ 56.850276][ T4952] EXT4-fs: Ignoring removed bh option [ 56.856234][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.867366][ T4954] netlink: 84 bytes leftover after parsing attributes in process `syz.2.581'. [ 56.879457][ T4952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.896691][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 56.905724][ T4960] bridge_slave_1: left allmulticast mode [ 56.911535][ T4960] bridge_slave_1: left promiscuous mode [ 56.917431][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.925502][ T4960] bridge_slave_0: left allmulticast mode [ 56.925891][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.931175][ T4960] bridge_slave_0: left promiscuous mode [ 56.945962][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.965373][ T4963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 57.087882][ T4970] netlink: '+}[@': attribute type 2 has an invalid length. [ 57.123172][ T4973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.129853][ T4973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.137606][ T4973] vhci_hcd vhci_hcd.0: Device attached [ 57.148443][ T4974] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 57.162552][ T3457] vhci_hcd: stop threads [ 57.166986][ T3457] vhci_hcd: release socket [ 57.171686][ T3457] vhci_hcd: disconnect device [ 57.214369][ T4985] gtp0: entered promiscuous mode [ 57.223958][ T4983] loop4: detected capacity change from 0 to 4096 [ 57.232694][ T4983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.259217][ T4988] loop2: detected capacity change from 0 to 1764 [ 57.349634][ T4993] loop2: detected capacity change from 0 to 512 [ 57.368888][ T4993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.380626][ T4993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.421028][ T4993] EXT4-fs (loop2): 1 truncate cleaned up [ 57.427637][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.444059][ T4993] Trying to write to read-only block-device loop2 [ 57.492124][ T4993] loop2: detected capacity change from 512 to 64 [ 57.500305][ T4993] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 214:freeing already freed block (bit 213); block bitmap corrupt. [ 57.515106][ T4993] EXT4-fs (loop2): pa ffff888106ecf620: logic 0, phys. 193, len 32 [ 57.523264][ T4993] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 32, pa_free 31 [ 57.547588][ T4369] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 57.559927][ T4369] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 57.563525][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 57.580956][ T5001] bridge_slave_1: left allmulticast mode [ 57.586889][ T5001] bridge_slave_1: left promiscuous mode [ 57.592931][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.600985][ T5001] bridge_slave_0: left allmulticast mode [ 57.606739][ T5001] bridge_slave_0: left promiscuous mode [ 57.612520][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.727609][ T5003] loop1: detected capacity change from 0 to 8192 [ 57.738840][ T5003] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.741457][ T5005] cgroup: Unknown subsys name 'cpuset' [ 57.768214][ T5007] loop3: detected capacity change from 0 to 1024 [ 57.788079][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 57.829090][ T3457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.888836][ T3457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.979077][ T5024] hub 9-0:1.0: USB hub found [ 57.995044][ T3457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.996257][ T5024] hub 9-0:1.0: 8 ports detected [ 58.036856][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 58.050006][ T5027] netlink: 556 bytes leftover after parsing attributes in process `syz.1.610'. [ 58.065655][ T3457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.216331][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.236935][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.247935][ T3457] bond0 (unregistering): Released all slaves [ 58.263275][ T5018] lo speed is unknown, defaulting to 1000 [ 58.294564][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 58.316283][ T3457] hsr_slave_0: left promiscuous mode [ 58.322550][ T3457] hsr_slave_1: left promiscuous mode [ 58.328544][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.336100][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.362958][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.370520][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.394666][ T3457] veth1_macvtap: left promiscuous mode [ 58.400706][ T3457] veth0_macvtap: left promiscuous mode [ 58.406675][ T3457] veth1_vlan: left promiscuous mode [ 58.414934][ T3457] veth0_vlan: left promiscuous mode [ 58.518440][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 58.528114][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 58.567957][ T5038] bridge_slave_1: left allmulticast mode [ 58.573830][ T5038] bridge_slave_1: left promiscuous mode [ 58.579668][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.588967][ T5038] bridge_slave_0: left allmulticast mode [ 58.594852][ T5038] bridge_slave_0: left promiscuous mode [ 58.600713][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.653334][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 58.698160][ T5018] chnl_net:caif_netlink_parms(): no params data found [ 58.763067][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.770260][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.779206][ T5018] bridge_slave_0: entered allmulticast mode [ 58.786063][ T5018] bridge_slave_0: entered promiscuous mode [ 58.795079][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.802216][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.809614][ T5018] bridge_slave_1: entered allmulticast mode [ 58.817706][ T5018] bridge_slave_1: entered promiscuous mode [ 58.849344][ T5018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.861320][ T5018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.885037][ T5018] team0: Port device team_slave_0 added [ 58.891790][ T5018] team0: Port device team_slave_1 added [ 58.917190][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.924245][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.950253][ T5018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.964306][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.971298][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.997349][ T5018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.050276][ T5018] hsr_slave_0: entered promiscuous mode [ 59.327362][ T5018] hsr_slave_1: entered promiscuous mode [ 59.333792][ T5018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.341482][ T5018] Cannot create hsr debugfs directory [ 59.569262][ T5018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.587123][ T5018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.596164][ T5018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.622978][ T5018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.711692][ T5115] hub 9-0:1.0: USB hub found [ 59.745390][ T5118] loop3: detected capacity change from 0 to 1024 [ 59.761700][ T5115] hub 9-0:1.0: 8 ports detected [ 59.792523][ T5118] EXT4-fs: inline encryption not supported [ 59.798457][ T5118] EXT4-fs: Ignoring removed bh option [ 59.806094][ T5018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.834168][ T5120] @: renamed from vlan0 [ 59.851266][ T5018] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.884672][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.891796][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.991840][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.999065][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.128954][ T5018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.312473][ T5018] veth0_vlan: entered promiscuous mode [ 60.322414][ T5018] veth1_vlan: entered promiscuous mode [ 60.347527][ T5018] veth0_macvtap: entered promiscuous mode [ 60.365375][ T5018] veth1_macvtap: entered promiscuous mode [ 60.382071][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.397671][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.410563][ T5018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.419408][ T5018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.428242][ T5018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.437074][ T5018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.574209][ T5158] hsr_slave_0 (unregistering): left promiscuous mode [ 60.637562][ T5162] loop4: detected capacity change from 0 to 1024 [ 60.709075][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 60.709092][ T29] audit: type=1400 audit(1753145564.491:1320): avc: denied { create } for pid=5165 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.122525][ T5195] ipvlan3: entered promiscuous mode [ 61.152318][ T5195] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 61.160172][ T5195] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.259973][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.290287][ T29] audit: type=1400 audit(1753145565.071:1321): avc: denied { read write } for pid=5207 comm="syz.4.671" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.313874][ T29] audit: type=1400 audit(1753145565.071:1322): avc: denied { open } for pid=5207 comm="syz.4.671" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.338046][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.346118][ T5204] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 61.353000][ T5204] batman_adv: batadv0: Removing interface: ipvlan2 [ 61.359057][ T5210] loop1: detected capacity change from 0 to 1024 [ 61.406323][ T29] audit: type=1400 audit(1753145565.181:1323): avc: denied { execute } for pid=5208 comm="syz.1.672" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.565311][ T29] audit: type=1326 audit(1753145565.341:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce7de9a9 code=0x7ffc0000 [ 61.588999][ T29] audit: type=1326 audit(1753145565.341:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce7de9a9 code=0x7ffc0000 [ 61.614009][ T29] audit: type=1326 audit(1753145565.361:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5217 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 61.637471][ T29] audit: type=1326 audit(1753145565.361:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5217 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 61.660958][ T29] audit: type=1326 audit(1753145565.361:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5217 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 61.684416][ T29] audit: type=1326 audit(1753145565.361:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5217 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f2e9a9 code=0x7ffc0000 [ 61.757002][ T5235] loop3: detected capacity change from 0 to 512 [ 61.764709][ T5235] EXT4-fs: Ignoring removed nobh option [ 61.785811][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.683: corrupted inode contents [ 61.824292][ T5235] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.683: mark_inode_dirty error [ 61.887997][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.683: corrupted inode contents [ 61.923215][ T5235] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.683: mark_inode_dirty error [ 61.938135][ T5246] lo speed is unknown, defaulting to 1000 [ 61.945580][ T5235] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.683: Failed to acquire dquot type 0 [ 61.968187][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.683: corrupted inode contents [ 61.983761][ T5235] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.683: mark_inode_dirty error [ 62.013336][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.683: corrupted inode contents [ 62.064346][ T5235] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.683: mark_inode_dirty error [ 62.103595][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.683: corrupted inode contents [ 62.116005][ T5235] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 62.128183][ T5235] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.683: corrupted inode contents [ 62.143296][ T5235] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.683: mark_inode_dirty error [ 62.188254][ T5235] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 62.208503][ T5235] EXT4-fs (loop3): 1 truncate cleaned up [ 62.224933][ T5235] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.379475][ T5263] __nla_validate_parse: 4 callbacks suppressed [ 62.379492][ T5263] netlink: 536 bytes leftover after parsing attributes in process `syz.5.694'. [ 62.396746][ T5263] netlink: 60 bytes leftover after parsing attributes in process `syz.5.694'. [ 62.498711][ T5274] veth0_vlan: entered allmulticast mode [ 62.558465][ T5283] loop1: detected capacity change from 0 to 512 [ 62.565783][ T5283] EXT4-fs: Ignoring removed nobh option [ 62.587290][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.703: corrupted inode contents [ 62.637435][ T5283] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.703: mark_inode_dirty error [ 62.661326][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.703: corrupted inode contents [ 62.666539][ T5293] loop0: detected capacity change from 0 to 128 [ 62.683149][ T5293] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.692615][ T5283] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.703: mark_inode_dirty error [ 62.708688][ T5295] lo speed is unknown, defaulting to 1000 [ 62.715316][ T5293] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.754286][ T5283] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.703: Failed to acquire dquot type 0 [ 62.786732][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.703: corrupted inode contents [ 62.799397][ T3457] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.813188][ T5300] loop3: detected capacity change from 0 to 512 [ 62.820444][ T5283] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.703: mark_inode_dirty error [ 62.836526][ T5304] futex_wake_op: syz.5.711 tries to shift op by -1; fix this program [ 62.854566][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.703: corrupted inode contents [ 62.867246][ T5300] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.889132][ T5300] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.898549][ T5283] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.703: mark_inode_dirty error [ 62.911680][ T5300] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.709: corrupted inode contents [ 62.912131][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.703: corrupted inode contents [ 62.942100][ T5283] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.963456][ T5283] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.703: corrupted inode contents [ 62.976104][ T5300] EXT4-fs (loop3): Remounting filesystem read-only [ 62.985041][ T5300] EXT4-fs (loop3): 1 truncate cleaned up [ 62.990612][ T5283] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.703: mark_inode_dirty error [ 62.990872][ T4152] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.003489][ T5283] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 63.012320][ T4152] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.031975][ T4152] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.047991][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 63.058563][ T5283] EXT4-fs (loop1): 1 truncate cleaned up [ 63.065051][ T5283] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.076048][ T5315] hsr_slave_0 (unregistering): left promiscuous mode [ 63.106688][ T5318] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.267642][ T5343] netlink: 'syz.4.727': attribute type 21 has an invalid length. [ 63.367950][ T5358] loop9: detected capacity change from 0 to 7 [ 63.374205][ T5357] loop4: detected capacity change from 0 to 128 [ 63.381150][ T5357] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.394076][ T5357] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.440435][ T273] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.476506][ T5371] loop0: detected capacity change from 0 to 512 [ 63.493843][ T5371] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.593901][ T5391] loop0: detected capacity change from 0 to 512 [ 63.601153][ T5393] loop5: detected capacity change from 0 to 512 [ 63.618337][ T5395] loop3: detected capacity change from 0 to 128 [ 63.625147][ T5395] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.627754][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 63.639153][ T5395] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.651620][ T5397] team1: entered promiscuous mode [ 63.662015][ T5397] team1: entered allmulticast mode [ 63.666444][ T5393] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.682627][ T5391] EXT4-fs (loop0): 1 orphan inode deleted [ 63.700908][ T5391] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.709102][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 63.720647][ T273] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 63.733186][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 63.764999][ T4129] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.804945][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 63.836713][ T5415] hsr_slave_0 (unregistering): left promiscuous mode [ 63.857603][ T5419] netlink: 68 bytes leftover after parsing attributes in process `syz.4.759'. [ 64.104132][ T5451] loop3: detected capacity change from 0 to 2048 [ 64.112956][ T5451] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.120232][ T5451] EXT4-fs (loop3): mount failed [ 64.356502][ T5487] loop3: detected capacity change from 0 to 164 [ 64.413138][ T5493] loop5: detected capacity change from 0 to 512 [ 64.419836][ T5493] EXT4-fs: Ignoring removed nobh option [ 64.443877][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.789: corrupted inode contents [ 64.457087][ T5493] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.789: mark_inode_dirty error [ 64.477867][ T5498] capability: warning: `syz.1.799' uses 32-bit capabilities (legacy support in use) [ 64.478862][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.789: corrupted inode contents [ 64.502060][ T5493] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.789: mark_inode_dirty error [ 64.522439][ T5493] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.789: Failed to acquire dquot type 0 [ 64.535690][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.789: corrupted inode contents [ 64.548122][ T5493] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.789: mark_inode_dirty error [ 64.561661][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.789: corrupted inode contents [ 64.574655][ T5493] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.789: mark_inode_dirty error [ 64.586708][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.789: corrupted inode contents [ 64.599777][ T5493] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 64.609009][ T5493] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.789: corrupted inode contents [ 64.637486][ T5493] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.789: mark_inode_dirty error [ 64.649368][ T5493] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 64.663118][ T5493] EXT4-fs (loop5): 1 truncate cleaned up [ 64.670954][ T5493] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.873405][ T5522] loop1: detected capacity change from 0 to 1024 [ 64.906645][ T5522] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.800: Allocating blocks 385-513 which overlap fs metadata [ 64.934815][ T5522] EXT4-fs (loop1): pa ffff888106ecf690: logic 16, phys. 129, len 24 [ 64.943011][ T5522] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 65.027498][ T5522] syz.1.800 (5522) used greatest stack depth: 8912 bytes left [ 65.060963][ T5537] netlink: 464 bytes leftover after parsing attributes in process `syz.4.806'. [ 65.110364][ T5541] can0: slcan on ttyS3. [ 65.132803][ T5541] can0 (unregistered): slcan off ttyS3. [ 65.139577][ T5541] Falling back ldisc for ttyS3. [ 65.212360][ T5549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 65.501307][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.510173][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.558828][ T5605] loop9: detected capacity change from 0 to 7 [ 65.571191][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.581421][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.589353][ T5605] loop9: unable to read partition table [ 65.596128][ T5605] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 65.596128][ T5605] ) failed (rc=-5) [ 65.686344][ T5624] loop0: detected capacity change from 0 to 512 [ 65.705732][ T5624] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.913123][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 65.913138][ T29] audit: type=1400 audit(1753145569.701:1449): avc: denied { read } for pid=5646 comm="syz.1.855" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.943588][ T29] audit: type=1400 audit(1753145569.701:1450): avc: denied { open } for pid=5646 comm="syz.1.855" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.981895][ T29] audit: type=1400 audit(1753145569.761:1451): avc: denied { ioctl } for pid=5646 comm="syz.1.855" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.405950][ T5669] loop5: detected capacity change from 0 to 128 [ 66.414150][ T5669] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.460597][ T5672] loop5: detected capacity change from 0 to 2048 [ 66.567548][ T29] audit: type=1326 audit(1753145570.351:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.5.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02249e9a9 code=0x0 [ 66.959354][ T5683] loop1: detected capacity change from 0 to 128 [ 66.967305][ T5683] EXT4-fs: Ignoring removed nobh option [ 66.977185][ T5683] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.990676][ T5687] veth0_vlan: entered allmulticast mode [ 66.997490][ T5687] : renamed from vlan0 [ 67.001172][ T29] audit: type=1326 audit(1753145570.771:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.025572][ T29] audit: type=1326 audit(1753145570.771:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.037136][ T5689] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 67.048973][ T29] audit: type=1326 audit(1753145570.771:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.080216][ T29] audit: type=1326 audit(1753145570.771:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.103615][ T29] audit: type=1326 audit(1753145570.791:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.126956][ T29] audit: type=1326 audit(1753145570.791:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab6a04e9a9 code=0x7ffc0000 [ 67.287657][ T5711] loop1: detected capacity change from 0 to 2048 [ 67.389438][ T5719] bond0: entered promiscuous mode [ 67.394571][ T5719] bond_slave_0: entered promiscuous mode [ 67.400325][ T5719] bond_slave_1: entered promiscuous mode [ 67.406098][ T5719] bond0: entered allmulticast mode [ 67.411241][ T5719] bond_slave_0: entered allmulticast mode [ 67.417087][ T5719] bond_slave_1: entered allmulticast mode [ 67.423817][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.442579][ T5721] loop5: detected capacity change from 0 to 128 [ 67.541247][ T5739] loop5: detected capacity change from 0 to 128 [ 67.599401][ T5750] __nla_validate_parse: 3 callbacks suppressed [ 67.599418][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'. [ 67.860502][ T5783] netlink: 124 bytes leftover after parsing attributes in process `syz.5.913'. [ 67.948825][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 68.009381][ T5798] loop1: detected capacity change from 0 to 128 [ 68.071558][ T5798] syz.1.919: attempt to access beyond end of device [ 68.071558][ T5798] loop1: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 68.097829][ T5798] syz.1.919: attempt to access beyond end of device [ 68.097829][ T5798] loop1: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 68.111654][ T5798] syz.1.919: attempt to access beyond end of device [ 68.111654][ T5798] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 68.125100][ T5798] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 68.137659][ T5798] syz.1.919: attempt to access beyond end of device [ 68.137659][ T5798] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 68.151081][ T5798] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 68.161613][ T5798] syz.1.919: attempt to access beyond end of device [ 68.161613][ T5798] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 68.175062][ T5798] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 68.187252][ T5798] syz.1.919: attempt to access beyond end of device [ 68.187252][ T5798] loop1: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 68.200878][ T5798] Buffer I/O error on dev loop1, logical block 145, lost async page write [ 68.231092][ T5798] syz.1.919: attempt to access beyond end of device [ 68.231092][ T5798] loop1: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 68.244590][ T5798] Buffer I/O error on dev loop1, logical block 146, lost async page write [ 68.246105][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 68.268513][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 68.274681][ T5798] syz.1.919: attempt to access beyond end of device [ 68.274681][ T5798] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 68.290839][ T5798] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 68.300806][ T5798] syz.1.919: attempt to access beyond end of device [ 68.300806][ T5798] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 68.314351][ T5798] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 68.330783][ T5798] syz.1.919: attempt to access beyond end of device [ 68.330783][ T5798] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 68.344198][ T5798] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 68.461164][ T5832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.486156][ T5836] loop5: detected capacity change from 0 to 1024 [ 68.504207][ T5836] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.536884][ T5832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.549295][ T5842] loop5: detected capacity change from 0 to 256 [ 68.556947][ T5842] FAT-fs (loop5): bogus number of FAT sectors [ 68.563106][ T5842] FAT-fs (loop5): Can't find a valid FAT filesystem [ 68.587151][ T5832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.665075][ T5832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.752478][ T5832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.765334][ T5832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.777453][ T5832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.790568][ T5832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804738][ T5855] loop3: detected capacity change from 0 to 512 [ 68.824488][ T5855] ext4: Unknown parameter 'obj_type' [ 68.865155][ T5858] loop5: detected capacity change from 0 to 128 [ 68.880621][ T5858] @: renamed from vlan0 (while UP) [ 68.952011][ T5871] netlink: 'syz.5.950': attribute type 12 has an invalid length. [ 69.261260][ T5918] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.333998][ T5923] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.361679][ T5918] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.428196][ T5918] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.506434][ T5918] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.598838][ T5918] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.635283][ T5918] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.664252][ T5918] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.691552][ T5918] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927616][ T6012] openvswitch: netlink: Message has 6 unknown bytes. [ 70.121859][ T6024] loop3: detected capacity change from 0 to 8192 [ 70.224989][ T6041] random: crng reseeded on system resumption [ 70.325682][ T5903] syz.0.955 (5903) used greatest stack depth: 6952 bytes left [ 70.401812][ C0] ================================================================== [ 70.409961][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 70.416231][ C0] [ 70.418575][ C0] read to 0xffffc900119779e0 of 4 bytes by task 6008 on cpu 1: [ 70.426144][ C0] do_select+0xe48/0xf50 [ 70.430418][ C0] core_sys_select+0x3d7/0x6e0 [ 70.435206][ C0] __se_sys_pselect6+0x216/0x280 [ 70.440183][ C0] __x64_sys_pselect6+0x78/0x90 [ 70.445078][ C0] x64_sys_call+0x1caa/0x2fb0 [ 70.449785][ C0] do_syscall_64+0xd2/0x200 [ 70.454304][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.460208][ C0] [ 70.462540][ C0] write to 0xffffc900119779e0 of 4 bytes by interrupt on cpu 0: [ 70.470177][ C0] pollwake+0xb6/0x100 [ 70.474282][ C0] __wake_up+0x66/0xb0 [ 70.478377][ C0] bpf_ringbuf_notify+0x22/0x30 [ 70.483253][ C0] irq_work_run+0xe2/0x2d0 [ 70.487696][ C0] __sysvec_irq_work+0x22/0x170 [ 70.492557][ C0] sysvec_irq_work+0x66/0x80 [ 70.497162][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 70.502116][ C0] native_apic_msr_write+0x3d/0x60 [ 70.507247][ C0] x2apic_send_IPI_self+0x10/0x20 [ 70.512299][ C0] arch_irq_work_raise+0x46/0x50 [ 70.517269][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 70.522661][ C0] irq_work_queue+0x70/0x100 [ 70.527272][ C0] bpf_ringbuf_submit+0xce/0xf0 [ 70.532142][ C0] bpf_prog_a526332ed0a73e3c+0x4b/0x4f [ 70.537619][ C0] bpf_trace_run2+0x107/0x1c0 [ 70.542308][ C0] __bpf_trace_sys_enter+0x10/0x30 [ 70.547446][ C0] trace_sys_enter+0x86/0x110 [ 70.552144][ C0] syscall_trace_enter+0x13e/0x1e0 [ 70.557277][ C0] do_syscall_64+0xac/0x200 [ 70.561805][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.567712][ C0] [ 70.570037][ C0] value changed: 0x00000001 -> 0x00000000 [ 70.575764][ C0] [ 70.578110][ C0] Reported by Kernel Concurrency Sanitizer on: [ 70.584284][ C0] CPU: 0 UID: 0 PID: 6058 Comm: syz.0.990 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 70.594882][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.604945][ C0] ==================================================================