last executing test programs: 2.4239137s ago: executing program 0 (id=2492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.378644634s ago: executing program 0 (id=2494): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x400c8c0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) 2.338533499s ago: executing program 0 (id=2495): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x88) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.693401882s ago: executing program 3 (id=2496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.692613182s ago: executing program 0 (id=2507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 1.692297372s ago: executing program 1 (id=2498): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000005c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.652803286s ago: executing program 4 (id=2501): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x100, 0x0) sendfile(r0, r1, &(0x7f00000001c0), 0x8) 1.604313541s ago: executing program 0 (id=2502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='{/}\\') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x100, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000280)='B', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) syz_clone(0x4000000, &(0x7f0000000080)="cfc6f4f18238d890d20d9df6f19f3a69f444b98c5cdbc614d8cfa56bbcaa2ca6b99aed85038174e0", 0x28, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000a00)="54f052d129c2a720059ebc57ec0b542685d21301bda49e34adae66b48b6f905d6ef06b5d46a50217d9a8c28be59be5729d61228d48d052518ef0692e47051d1a0b066d034ccb25ac9e2b5b65863f9f99e4c0cf128ed58563deb31d87a3274cfcb502d96215dbe3e43cdd9b5755fb9b363c176a5772c4efccecaf962ee2e1c20aae3c460ac7ae40ba19ae5d78402219e05b43756e3a115696f2741d3ee74795e88d3e05022b153a5e1a85") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) 1.272160644s ago: executing program 3 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 1.247921446s ago: executing program 3 (id=2504): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.124673149s ago: executing program 1 (id=2505): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) 1.10339154s ago: executing program 1 (id=2506): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)='B', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6}) 811.315219ms ago: executing program 2 (id=2508): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000210000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 768.294734ms ago: executing program 4 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 753.345975ms ago: executing program 2 (id=2510): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) gettid() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 710.420829ms ago: executing program 1 (id=2511): socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x70c4f1e97a26349, &(0x7f0000000200)=0x3, 0x4) mq_notify(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 655.239405ms ago: executing program 3 (id=2512): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 655.066184ms ago: executing program 4 (id=2513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 612.662559ms ago: executing program 3 (id=2514): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 600.57266ms ago: executing program 0 (id=2515): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 542.339596ms ago: executing program 2 (id=2516): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) acct(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x1, 0x1002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@bh}, {@acl}, {@noblock_validity}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x66}}, {@acl}, {@resgid}, {@debug}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}], [], 0x3d}, 0x1, 0x536, &(0x7f0000000740)="$eJzs3UFsI1cZAOB/HHu7yaZNChygEqXQouwK1k4a2kY9lCIhOFUCyn0JiRNFceIodtokqmhWHDgiIQRInMqFCxInTkioEheOCKkSnEGAQAi2cEBa6CDb4zSbjJOwceLd+Puk8bz3PPP+9xzNZN7MaCaAofVURLwcEe+laXojIiay8kI2xV5nai337p03FlpTEmn66t+TSLKybl1p2yNxLVvtakR85YsRX0+Oxm3s7K7O12rVzSxfaa5tVBo7uzdX1uaXq8vV9dnZmefnXph7bm66L/0cj4iXPv/n7337x1946Reffv0Pt/56/RtJVh6H+vF/Kh73ZafrpfZvcXCFzfsM9qC5m6Zpsd3DzGjeUiNHSm6fc7sAAOjtAxHxiYi4ERMxcvzhLAAAAPAQSj87Hv9JutfujrjSoxwAAAB4iBTa98AmhXJ2v+94FArlcrTv4f1QjBVq9UbzU0v1rfXFzr2yk1EqLK3UqtPZvcKTUUpa+Zl2+v38s4fysxHxeER8d2K0nS8v1GuLgz75AQAAAEPi2qHx/78mOuN/AAAA4JKZHHQDAAAAgHNn/A8AAACXn/E/AAAAXGpfeuWV1pR233+9+NrO1mr9tZuL1cZqeW1robxQ39woL9fry+1n9q2dVF+tXt/4TKxvbVea1Uaz0tjZvbVW31pv3lq55xXYAAAAwAV6/GNv/y6JiL0XR9tTy5XTrXrKxYAHVXE/lWTzzma9PXZgod8/1pn/qfXhNB5cFiODbgAwMMVBNwAYmNKgGwAMXHLC9z1H/b/O5h8/UPZmf9oEAAD019RH8q//n3xecK9wAc0DzpHrfzC8bP8wvNrH+ae9k9cRP1wqJUcAMPTOfP3/RGl6ukgAAMB5GW9PSaGcnd4bj0KhXI54tP1agFKytFKrTkfEYxHx24nSI638THvNxJE8AAAAAAAAAAAAAAAAAAAAAAAAAJxSmiaRAgAAAJdaROEvyS87z/Kfmnhm/PD5gSvJvycie0Xo6z989fvb883m5kyr/B/75c0fZOXPDuIMBgAAAAyFYm5pj5fzdcfp3XE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTTu3feWOhOFxn3b5+LiMm8+MW42p5fjVJEjP0zieKB9ZKIGOlD/NHWx4fz4ietZu2HzIs/+tbZ4+/dPjZ+TGa/Ql78a2cPD0Pt7db+5+W87a8QT7Xn+dtfMeKe/P3qvf+L/f3fSI/t/9FTxnjinZ9Wesa/HfFEMX//042f9Ij/dF6FP/vWkaKvfXV3t1f89K2Iqdz/P8k9sSrNtY1KY2f35sra/HJ1ubo+Ozvz/NwLc8/NTVeWVmrV7DM3xnc++vP3juv/WI/4kyf0/5mc+q7klP33ne07H+wkS3nxrz+dE/9XP8qWOBq/kP3v+2SWbn0/1U3vddIHPfmT3zx5XP8Xe/T/pL//9V6VHnLjy9/84ykXBQAuQGNnd3W+VqtuPhiJF6PvNbdG+APv18OXuJsOJPrdNE0vLuibfa0wTdO0tU2doZ4kLu4HT45v6qD3TAAAQL+9f9A/6JYAAAAAAAAAAAAAAAAAAADA8DqH54p1q+75ZIG9/VTSj0doAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xf8CAAD//6Uy48E=") shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) 312.589319ms ago: executing program 4 (id=2517): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) sendmsg$NFT_MSG_GETOBJ(r4, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 242.131986ms ago: executing program 2 (id=2518): unshare(0x22020600) ioperm(0x3, 0x4, 0x1000008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048084}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000002000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 206.925199ms ago: executing program 4 (id=2519): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@noauto_da_alloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nolazytime}]}, 0xfe, 0x282, &(0x7f0000001740)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xb, 0x6, 0x15a, 0x81, 0x4010, r0, 0xffff, '\x00', 0x0, r2, 0x2, 0x4, 0x5}, 0x50) getdents64(r2, 0x0, 0x0) 177.430212ms ago: executing program 2 (id=2520): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}, {0xa, 0x4e20, 0xffff25d6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0xf}, r0, 0x2}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x80abedb6390d4f37) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) setregid(0xffffffffffffffff, 0x0) 173.844952ms ago: executing program 4 (id=2521): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x3544, &(0x7f0000000680)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 120.382298ms ago: executing program 2 (id=2522): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r4, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffffffffffffffd) 38.303405ms ago: executing program 1 (id=2523): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.189477ms ago: executing program 1 (id=2524): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff09, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 0s ago: executing program 3 (id=2525): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@noload}]}, 0x1, 0x5ec, &(0x7f0000001580)="$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") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6ef8, 0x71c, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0, 0x0, 0x400007}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r1}, 0xc) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) dup3(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.984769][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.002667][ T6979] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1264: bg 0: block 353: padding at end of block bitmap is not set [ 112.062069][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.088138][ T7001] loop3: detected capacity change from 0 to 128 [ 112.103260][ T7001] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 112.110894][ T7001] FAT-fs (loop3): Filesystem has been set read-only [ 112.205360][ T7006] netlink: 'syz.3.1272': attribute type 39 has an invalid length. [ 113.094987][ T7031] loop1: detected capacity change from 0 to 512 [ 113.106979][ T7031] EXT4-fs: Ignoring removed bh option [ 113.114119][ T7031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.123253][ T7031] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 113.143394][ T7033] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 113.163900][ T7031] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 113.174047][ T7033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.182293][ T7031] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 113.201435][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.228851][ T7033] bond2: (slave ip6gretap1): making interface the new active one [ 113.237422][ T29] kauditd_printk_skb: 1129 callbacks suppressed [ 113.237438][ T29] audit: type=1326 audit(1760788644.123:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f836df15e67 code=0x7ffc0000 [ 113.246501][ T7033] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 113.267098][ T29] audit: type=1326 audit(1760788644.123:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f836debb099 code=0x7ffc0000 [ 113.267138][ T29] audit: type=1326 audit(1760788644.123:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 113.281476][ T7031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1285: bg 0: block 353: padding at end of block bitmap is not set [ 113.299992][ T29] audit: type=1326 audit(1760788644.163:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.300092][ T29] audit: type=1326 audit(1760788644.163:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.385068][ T29] audit: type=1326 audit(1760788644.163:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.408521][ T29] audit: type=1326 audit(1760788644.163:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.412488][ T7039] __nla_validate_parse: 11 callbacks suppressed [ 113.412509][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.431977][ T29] audit: type=1326 audit(1760788644.163:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.438352][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.447153][ T29] audit: type=1326 audit(1760788644.163:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.473491][ T7040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7040 comm=syz.2.1286 [ 113.479565][ T29] audit: type=1326 audit(1760788644.163:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 113.544290][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.554171][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.589833][ T7042] loop0: detected capacity change from 0 to 1024 [ 113.598136][ T7042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.609047][ T7042] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 113.620014][ T7042] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 113.632452][ T7042] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.642698][ T7042] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: comm syz.0.1288: inode #1: comm syz.0.1288: iget: illegal inode # [ 113.669628][ T7042] EXT4-fs (loop0): Remounting filesystem read-only [ 113.676247][ T7042] EXT4-fs (loop0): no journal found [ 113.688229][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.697337][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.727928][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1289'. [ 113.737069][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1289'. [ 113.754576][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 113.799510][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1289'. [ 113.808669][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1289'. [ 114.469884][ T7081] : renamed from dummy0 [ 114.471477][ T7085] loop0: detected capacity change from 0 to 128 [ 114.608754][ T7085] bio_check_eod: 4548 callbacks suppressed [ 114.608901][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.608901][ T7085] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 114.628522][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.628522][ T7085] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 114.674710][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.674710][ T7085] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 114.704269][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.704269][ T7085] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 114.718022][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.718022][ T7085] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 114.758924][ T7099] loop1: detected capacity change from 0 to 1024 [ 114.783912][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.783912][ T7085] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 114.797604][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.797604][ T7085] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 114.801857][ T7099] EXT4-fs: Ignoring removed orlov option [ 114.819112][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.819112][ T7085] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 114.832807][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.832807][ T7085] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 114.846353][ T7085] syz.0.1300: attempt to access beyond end of device [ 114.846353][ T7085] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 114.865096][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.946377][ T7108] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.984365][ T7110] loop0: detected capacity change from 0 to 1024 [ 114.997698][ T7110] EXT4-fs: Ignoring removed orlov option [ 115.045450][ T7110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.069036][ T7110] netlink: 'syz.0.1310': attribute type 6 has an invalid length. [ 115.079480][ T7108] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.134390][ T7108] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.160806][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.286890][ T7108] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.837554][ T4307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.863594][ T4290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.904641][ T4290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.933153][ T4290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.941561][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7132 comm=syz.3.1316 [ 116.035197][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.123730][ T7136] team0: Port device team_slave_1 removed [ 116.381830][ T7153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 116.390183][ T7153] bond5: (slave bond6): Enslaving as an active interface with an up link [ 116.406544][ T7153] bond5 (unregistering): (slave bond6): Releasing backup interface [ 116.416225][ T7153] bond5 (unregistering): Released all slaves [ 116.485299][ T7166] loop2: detected capacity change from 0 to 128 [ 116.510041][ T7166] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.805339][ T7166] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.127521][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.171138][ T7176] netlink: 'syz.1.1333': attribute type 39 has an invalid length. [ 117.177136][ T7177] loop2: detected capacity change from 0 to 1024 [ 117.186113][ T7177] EXT4-fs: Ignoring removed orlov option [ 117.194609][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.505560][ T7205] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.584211][ T7205] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.644136][ T7205] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.670408][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.724747][ T7205] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.749329][ T7218] hsr_slave_0: left promiscuous mode [ 117.754866][ T3406] IPVS: starting estimator thread 0... [ 117.760865][ T7218] hsr_slave_1: left promiscuous mode [ 117.794063][ T7216] program syz.0.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.853688][ T7219] IPVS: using max 2256 ests per chain, 112800 per kthread [ 117.931793][ T7230] loop1: detected capacity change from 0 to 512 [ 117.950856][ T7230] EXT4-fs: Ignoring removed oldalloc option [ 117.957261][ T7230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.968996][ T7230] EXT4-fs (loop1): 1 truncate cleaned up [ 117.975203][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.054604][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.070993][ T7235] loop0: detected capacity change from 0 to 1024 [ 118.084140][ T7235] EXT4-fs: Ignoring removed orlov option [ 118.093355][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.956075][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.008989][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 119.009007][ T29] audit: type=1326 audit(1760788649.893:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.040059][ T29] audit: type=1326 audit(1760788649.893:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.063869][ T29] audit: type=1326 audit(1760788649.893:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.087945][ T29] audit: type=1326 audit(1760788649.893:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.111410][ T29] audit: type=1326 audit(1760788649.893:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.135019][ T29] audit: type=1326 audit(1760788649.893:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.158291][ T29] audit: type=1326 audit(1760788649.893:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.182078][ T29] audit: type=1326 audit(1760788649.893:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.205510][ T29] audit: type=1326 audit(1760788649.893:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 119.230354][ T29] audit: type=1326 audit(1760788649.903:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 120.021645][ T7273] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.021645][ T7273] The task syz.0.1368 (7273) triggered the difference, watch for misbehavior. [ 120.089044][ T4307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.101054][ T4307] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.112750][ T4307] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.128085][ T4307] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.153327][ T7278] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.204539][ T3406] IPVS: starting estimator thread 0... [ 120.210686][ T7281] __nla_validate_parse: 13 callbacks suppressed [ 120.210725][ T7281] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1358'. [ 120.227066][ T7278] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.257755][ T7281] hsr_slave_0: left promiscuous mode [ 120.263606][ T7281] hsr_slave_1: left promiscuous mode [ 120.283123][ T7287] tipc: Enabled bearer , priority 0 [ 120.290952][ T7287] tipc: Resetting bearer [ 120.292479][ T7283] IPVS: using max 2016 ests per chain, 100800 per kthread [ 120.306372][ T7286] tipc: Disabling bearer [ 120.319849][ T7278] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.418086][ T7278] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.794383][ T7303] loop1: detected capacity change from 0 to 2048 [ 120.814505][ T7303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 121.099140][ T7318] loop2: detected capacity change from 0 to 512 [ 121.226172][ T7318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.272358][ T7303] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.287581][ T7303] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 121.300075][ T7303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.300075][ T7303] [ 121.309772][ T7303] EXT4-fs (loop1): Total free blocks count 0 [ 121.315841][ T7303] EXT4-fs (loop1): Free/Dirty block details [ 121.321762][ T7303] EXT4-fs (loop1): free_blocks=2415919104 [ 121.327544][ T7303] EXT4-fs (loop1): dirty_blocks=8208 [ 121.332872][ T7303] EXT4-fs (loop1): Block reservation details [ 121.338880][ T7303] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 121.667537][ T4308] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 121.759969][ T7318] EXT4-fs (loop2): 1 orphan inode deleted [ 121.765957][ T7318] EXT4-fs (loop2): 1 truncate cleaned up [ 121.822831][ T7318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.175131][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.308442][ T4308] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.614408][ T7351] loop0: detected capacity change from 0 to 512 [ 122.629715][ T7351] journal_path: Non-blockdev passed as './bus' [ 122.636104][ T7351] EXT4-fs: error: could not find journal device path [ 122.927118][ T7371] syzkaller0: entered allmulticast mode [ 122.933700][ T7371] syzkaller0: entered promiscuous mode [ 122.941007][ T7371] syzkaller0 (unregistering): left allmulticast mode [ 122.947925][ T7371] syzkaller0 (unregistering): left promiscuous mode [ 123.169702][ T7376] tipc: New replicast peer: 255.255.255.83 [ 123.175818][ T7376] tipc: Enabled bearer , priority 10 [ 123.243448][ T7378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7378 comm=syz.0.1397 [ 123.261859][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 123.459492][ T7389] loop0: detected capacity change from 0 to 512 [ 123.468837][ T7389] EXT4-fs: Ignoring removed oldalloc option [ 123.484500][ T7389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.515837][ T7389] EXT4-fs (loop0): 1 truncate cleaned up [ 123.521953][ T7389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.606258][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.645669][ T7396] loop0: detected capacity change from 0 to 512 [ 123.657625][ T7396] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.722750][ T3318] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 123.741714][ T4308] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.764340][ T4308] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.780782][ T4308] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.799426][ T4308] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.284485][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 124.284503][ T29] audit: type=1326 audit(1760788655.173:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.314956][ T29] audit: type=1326 audit(1760788655.173:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.338509][ T29] audit: type=1326 audit(1760788655.173:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.338571][ T7345] Bluetooth: hci0: command 0x1003 tx timeout [ 124.362392][ T3821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.378627][ T29] audit: type=1326 audit(1760788655.173:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.402360][ T29] audit: type=1326 audit(1760788655.173:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.407393][ T7432] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1417'. [ 124.425975][ T29] audit: type=1326 audit(1760788655.173:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.458941][ T29] audit: type=1326 audit(1760788655.263:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.482628][ T29] audit: type=1326 audit(1760788655.263:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.510971][ T29] audit: type=1326 audit(1760788655.393:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.534510][ T29] audit: type=1326 audit(1760788655.393:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 124.548402][ T7436] loop3: detected capacity change from 0 to 1024 [ 124.564814][ T7436] EXT4-fs: Ignoring removed orlov option [ 124.573119][ T7436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.588752][ T7428] loop2: detected capacity change from 0 to 512 [ 124.645086][ T7428] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1415: couldn't read orphan inode 26 (err -116) [ 124.657818][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.672109][ T7428] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.735866][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.803392][ T7446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1420'. [ 124.921688][ T7453] loop2: detected capacity change from 0 to 512 [ 124.932690][ T7453] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.964121][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.995242][ T3316] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 125.019327][ T7461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7461 comm=syz.2.1425 [ 125.032848][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 125.323221][ T7477] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1429'. [ 125.332402][ T7477] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1429'. [ 125.660012][ T7485] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1434'. [ 125.857137][ T7487] loop3: detected capacity change from 0 to 512 [ 125.871819][ T7489] loop1: detected capacity change from 0 to 512 [ 125.874187][ T7487] EXT4-fs: Ignoring removed oldalloc option [ 125.885793][ T7487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.896999][ T7489] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.911384][ T7487] EXT4-fs (loop3): 1 truncate cleaned up [ 125.983939][ T3311] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 126.002753][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.034141][ T7495] veth4: entered promiscuous mode [ 126.039240][ T7495] veth4: entered allmulticast mode [ 126.073692][ T7496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1438'. [ 126.116609][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.612387][ T3821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.027860][ T7535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1453'. [ 128.170688][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1459'. [ 128.272858][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 128.306034][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'. [ 128.369266][ T7556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7556 comm=syz.2.1462 [ 128.455266][ T7563] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1461'. [ 128.464412][ T7563] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1461'. [ 129.214809][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.234032][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.276188][ T4307] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.295002][ T4307] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.304487][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 129.304503][ T29] audit: type=1326 audit(1760788660.193:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63b655e67 code=0x7ffc0000 [ 129.334205][ T29] audit: type=1326 audit(1760788660.193:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63b5fb099 code=0x7ffc0000 [ 129.357562][ T29] audit: type=1326 audit(1760788660.193:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 129.381605][ T4307] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.390138][ T4307] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.411610][ T29] audit: type=1326 audit(1760788660.273:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63b655e67 code=0x7ffc0000 [ 129.435125][ T29] audit: type=1326 audit(1760788660.273:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63b5fb099 code=0x7ffc0000 [ 129.458524][ T29] audit: type=1326 audit(1760788660.273:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 129.482374][ T29] audit: type=1326 audit(1760788660.293:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63b655e67 code=0x7ffc0000 [ 129.506388][ T29] audit: type=1326 audit(1760788660.293:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63b5fb099 code=0x7ffc0000 [ 129.529753][ T29] audit: type=1326 audit(1760788660.293:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 129.553397][ T29] audit: type=1326 audit(1760788660.293:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63b655e67 code=0x7ffc0000 [ 129.601419][ T7614] loop3: detected capacity change from 0 to 512 [ 129.609677][ T7614] EXT4-fs: test_dummy_encryption option not supported [ 130.365639][ T7634] __nla_validate_parse: 2 callbacks suppressed [ 130.365659][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 130.574350][ T7640] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1493'. [ 130.614109][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 130.809733][ T7655] loop2: detected capacity change from 0 to 512 [ 130.843925][ T7655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.856831][ T7655] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.903990][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.106437][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 131.127643][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 131.301011][ T7685] 7: renamed from vlan0 [ 131.902577][ T4325] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 131.925676][ T7713] : renamed from bond0 [ 132.026151][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.049244][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.090380][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 132.099355][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.111877][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.500432][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 133.584556][ T7773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.746200][ T7785] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 133.775339][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 134.233736][ T7805] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1557'. [ 134.254765][ T7805] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1557'. [ 134.321359][ T3406] Process accounting resumed [ 134.512362][ T7827] bridge: RTM_NEWNEIGH with invalid ether address [ 134.661601][ T7837] loop0: detected capacity change from 0 to 1024 [ 134.668968][ T7837] EXT4-fs: Ignoring removed orlov option [ 134.674851][ T7837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.696353][ T7837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.723320][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.156226][ T7885] loop3: detected capacity change from 0 to 512 [ 135.173213][ T7885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.209368][ T7885] EXT4-fs (loop3): 1 truncate cleaned up [ 135.235301][ T7885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.308429][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.339306][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.402716][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 135.402732][ T29] audit: type=1326 audit(1760788666.293:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.482323][ T29] audit: type=1326 audit(1760788666.333:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.505991][ T29] audit: type=1326 audit(1760788666.333:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.528939][ T29] audit: type=1326 audit(1760788666.333:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.551831][ T29] audit: type=1326 audit(1760788666.333:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.574676][ T29] audit: type=1326 audit(1760788666.333:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.597997][ T29] audit: type=1326 audit(1760788666.333:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.620866][ T29] audit: type=1326 audit(1760788666.333:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.643728][ T29] audit: type=1326 audit(1760788666.333:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.666646][ T29] audit: type=1326 audit(1760788666.333:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 135.740450][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.754533][ T7903] __nla_validate_parse: 6 callbacks suppressed [ 135.754577][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 135.843349][ T7913] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 135.864954][ T7915] SELinux: security_context_str_to_sid () failed with errno=-22 [ 135.925366][ T7924] loop0: detected capacity change from 0 to 128 [ 135.952212][ T7924] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 135.974493][ T7926] geneve2: entered promiscuous mode [ 135.979780][ T7926] geneve2: entered allmulticast mode [ 136.069182][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 136.139158][ T7944] bridge: RTM_NEWNEIGH with invalid ether address [ 136.703540][ T7969] loop1: detected capacity change from 0 to 512 [ 136.734137][ T7969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.751151][ T7969] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.834465][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.726491][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.377128][ T8014] sch_fq: defrate 4294967295 ignored. [ 138.447522][ T8020] veth6: entered promiscuous mode [ 138.452751][ T8020] veth6: entered allmulticast mode [ 139.753080][ T3821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.922551][ T8053] syzkaller0: entered allmulticast mode [ 139.932721][ T8053] syzkaller0: entered promiscuous mode [ 139.967349][ T8053] syzkaller0 (unregistering): left allmulticast mode [ 139.974132][ T8053] syzkaller0 (unregistering): left promiscuous mode [ 140.002892][ T8056] netlink: 'syz.3.1650': attribute type 10 has an invalid length. [ 140.044862][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.065759][ T8056] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.385591][ T8087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8087 comm=syz.0.1662 [ 140.401253][ T8065] netlink: 'syz.4.1654': attribute type 10 has an invalid length. [ 140.797756][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 140.797781][ T29] audit: type=1326 audit(1760788671.683:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.843161][ T29] audit: type=1326 audit(1760788671.723:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.866663][ T29] audit: type=1326 audit(1760788671.723:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.890211][ T29] audit: type=1326 audit(1760788671.723:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.913629][ T29] audit: type=1326 audit(1760788671.723:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.937070][ T29] audit: type=1326 audit(1760788671.723:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.960528][ T29] audit: type=1326 audit(1760788671.723:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 140.984309][ T29] audit: type=1326 audit(1760788671.723:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 141.007971][ T29] audit: type=1400 audit(1760788671.723:5882): avc: denied { view } for pid=8100 comm="syz.3.1669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 141.027020][ T29] audit: type=1326 audit(1760788671.723:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 141.104890][ T8107] SELinux: ebitmap: truncated map [ 141.111594][ T8107] SELinux: failed to load policy [ 141.351603][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 141.444590][ T8125] netlink: 'syz.3.1677': attribute type 4 has an invalid length. [ 141.551852][ T8134] loop3: detected capacity change from 0 to 128 [ 141.638098][ T8138] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 141.647085][ T8138] ref_ctr increment failed for inode: 0x702 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888103f785c0 [ 141.658515][ T8134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.666399][ T8134] FAT-fs (loop3): Filesystem has been set read-only [ 141.670123][ T8134] bio_check_eod: 95 callbacks suppressed [ 141.670143][ T8134] syz.3.1680: attempt to access beyond end of device [ 141.670143][ T8134] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 141.702511][ T8134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.710397][ T8134] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 141.719267][ T8143] syz.3.1680: attempt to access beyond end of device [ 141.719267][ T8143] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 141.732643][ T8143] buffer_io_error: 4550 callbacks suppressed [ 141.732658][ T8143] Buffer I/O error on dev loop3, logical block 2065, async page read [ 141.747510][ T8143] syz.3.1680: attempt to access beyond end of device [ 141.747510][ T8143] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 141.760821][ T8143] Buffer I/O error on dev loop3, logical block 2066, async page read [ 141.792420][ T8143] syz.3.1680: attempt to access beyond end of device [ 141.792420][ T8143] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 141.805776][ T8143] Buffer I/O error on dev loop3, logical block 2067, async page read [ 141.842489][ T8143] syz.3.1680: attempt to access beyond end of device [ 141.842489][ T8143] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 141.855901][ T8143] Buffer I/O error on dev loop3, logical block 2068, async page read [ 141.872323][ T8143] syz.3.1680: attempt to access beyond end of device [ 141.872323][ T8143] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 141.885654][ T8143] Buffer I/O error on dev loop3, logical block 2069, async page read [ 142.062435][ T8143] syz.3.1680: attempt to access beyond end of device [ 142.062435][ T8143] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 142.075832][ T8143] Buffer I/O error on dev loop3, logical block 2070, async page read [ 142.116849][ T8143] syz.3.1680: attempt to access beyond end of device [ 142.116849][ T8143] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 142.130211][ T8143] Buffer I/O error on dev loop3, logical block 2071, async page read [ 142.332739][ T8143] syz.3.1680: attempt to access beyond end of device [ 142.332739][ T8143] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 142.346076][ T8143] Buffer I/O error on dev loop3, logical block 2072, async page read [ 142.374817][ T8157] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1690'. [ 142.402162][ T8134] syz.3.1680: attempt to access beyond end of device [ 142.402162][ T8134] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 142.415524][ T8134] Buffer I/O error on dev loop3, logical block 2065, async page read [ 142.456684][ T8134] Buffer I/O error on dev loop3, logical block 2066, async page read [ 142.649238][ T8172] netlink: 'syz.1.1696': attribute type 13 has an invalid length. [ 142.657284][ T8172] netlink: 'syz.1.1696': attribute type 17 has an invalid length. [ 142.713299][ T8177] loop0: detected capacity change from 0 to 1024 [ 142.713917][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.720514][ T8177] EXT4-fs: Ignoring removed orlov option [ 142.729155][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.732263][ T8177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.750678][ T8172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.782426][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.836315][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.886143][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 142.900020][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 142.912330][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 142.925921][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 142.935743][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 142.957976][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.966532][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.975300][ T8194] bridge0: port 3() entered blocking state [ 142.981757][ T8194] bridge0: port 3() entered forwarding state [ 142.990816][ T8194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.021757][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 143.141096][ T8211] loop3: detected capacity change from 0 to 1024 [ 143.148107][ T8211] EXT4-fs: Ignoring removed orlov option [ 143.153978][ T8211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.174432][ T8211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.203844][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.226247][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.235059][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.244474][ T8216] xt_hashlimit: max too large, truncated to 1048576 [ 143.773074][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 143.786804][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 143.881473][ T8241] loop2: detected capacity change from 0 to 1024 [ 143.890012][ T8241] EXT4-fs: Ignoring removed orlov option [ 143.895889][ T8241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.922898][ T8241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.977274][ T8255] netlink: 'syz.4.1727': attribute type 30 has an invalid length. [ 143.989600][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.235506][ T8272] cgroup: fork rejected by pids controller in /syz3 [ 144.864767][ T4307] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.241133][ T8867] netlink: 'syz.4.1744': attribute type 13 has an invalid length. [ 145.249234][ T8867] netlink: 'syz.4.1744': attribute type 17 has an invalid length. [ 145.377323][ T8867] 8021q: adding VLAN 0 to HW filter on device  [ 145.393154][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.427297][ T8867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.465634][ T8890] loop2: detected capacity change from 0 to 1024 [ 145.603914][ T8890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.618601][ T8890] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.629584][ T8890] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 145.645120][ T8890] JBD2: no valid journal superblock found [ 145.650933][ T8890] EXT4-fs (loop2): Could not load journal inode [ 146.865108][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 146.874275][ T7345] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.963027][ T9005] loop1: detected capacity change from 0 to 764 [ 146.972078][ T9005] rock: directory entry would overflow storage [ 146.978423][ T9005] rock: sig=0x4f50, size=4, remaining=3 [ 146.984034][ T9005] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.071337][ T9020] loop1: detected capacity change from 0 to 128 [ 147.101196][ T9020] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 147.109152][ T9020] FAT-fs (loop1): Filesystem has been set read-only [ 147.118262][ T9020] bio_check_eod: 7 callbacks suppressed [ 147.118283][ T9020] syz.1.1767: attempt to access beyond end of device [ 147.118283][ T9020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 147.232151][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 147.248897][ T9032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.267225][ T9032] vlan1: entered allmulticast mode [ 147.272782][ T9032] bond4: entered allmulticast mode [ 147.323601][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 147.323619][ T29] audit: type=1326 audit(1760788934.212:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.354126][ T29] audit: type=1326 audit(1760788934.212:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.377779][ T29] audit: type=1326 audit(1760788934.212:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.401306][ T29] audit: type=1326 audit(1760788934.212:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.430147][ T29] audit: type=1326 audit(1760788934.312:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.459571][ T29] audit: type=1326 audit(1760788934.322:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.483478][ T29] audit: type=1326 audit(1760788934.332:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.507329][ T29] audit: type=1326 audit(1760788934.332:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.530927][ T29] audit: type=1326 audit(1760788934.332:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.554691][ T29] audit: type=1326 audit(1760788934.342:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 147.603362][ T9049] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 147.611253][ T9049] ipvlan0: entered allmulticast mode [ 147.616609][ T9049] veth0_vlan: entered allmulticast mode [ 147.638142][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1782'. [ 147.647437][ T9039] loop2: detected capacity change from 0 to 512 [ 147.650523][ T9049] team0: Device ipvlan0 failed to register rx_handler [ 147.671669][ T9051] netdevsi: renamed from sit0 [ 147.677655][ T9039] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.688466][ T9051] netdevsi: entered promiscuous mode [ 147.702263][ T9039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1777: bg 0: block 248: padding at end of block bitmap is not set [ 147.726915][ T9039] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1777: Failed to acquire dquot type 1 [ 147.740830][ T9039] EXT4-fs (loop2): 1 truncate cleaned up [ 147.753036][ T9039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.818406][ T9069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1790'. [ 147.832205][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.985766][ T9088] loop3: detected capacity change from 0 to 1024 [ 148.004719][ T9088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.023937][ T9088] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.035009][ T9088] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.090236][ T9088] JBD2: no valid journal superblock found [ 148.096094][ T9088] EXT4-fs (loop3): Could not load journal inode [ 148.207297][ T9103] loop2: detected capacity change from 0 to 512 [ 148.226726][ T9103] EXT4-fs: Ignoring removed nobh option [ 148.255851][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1800: corrupted inode contents [ 148.275863][ T9103] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.1800: mark_inode_dirty error [ 148.287904][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1800: corrupted inode contents [ 148.300663][ T9103] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1800: mark_inode_dirty error [ 148.313950][ T9103] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1800: Failed to acquire dquot type 0 [ 148.325993][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1800: corrupted inode contents [ 148.338466][ T9103] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.1800: mark_inode_dirty error [ 148.350622][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1800: corrupted inode contents [ 148.362935][ T9103] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1800: mark_inode_dirty error [ 148.374704][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1800: corrupted inode contents [ 148.386951][ T9103] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 148.396674][ T9103] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1800: corrupted inode contents [ 148.410085][ T9103] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.1800: mark_inode_dirty error [ 148.421581][ T9103] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 148.431570][ T9103] EXT4-fs (loop2): 1 truncate cleaned up [ 148.438006][ T9103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.450924][ T9103] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.467559][ T9103] xt_hashlimit: max too large, truncated to 1048576 [ 148.492315][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.549991][ T9145] loop1: detected capacity change from 0 to 4096 [ 148.561038][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 148.571542][ T9150] dummy0: left allmulticast mode [ 148.579729][ T9150] bridge0: port 3(dummy0) entered disabled state [ 148.580453][ T9145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.607882][ T9150] bridge_slave_1: left allmulticast mode [ 148.613705][ T9150] bridge_slave_1: left promiscuous mode [ 148.619463][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.630788][ T9150] bridge_slave_0: left allmulticast mode [ 148.636545][ T9150] bridge_slave_0: left promiscuous mode [ 148.642495][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.797838][ T9172] loop3: detected capacity change from 0 to 764 [ 148.854961][ T9172] rock: directory entry would overflow storage [ 148.861180][ T9172] rock: sig=0x4f50, size=4, remaining=3 [ 148.866889][ T9172] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 148.992645][ T9203] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1810'. [ 149.002402][ T9205] loop0: detected capacity change from 0 to 512 [ 149.021832][ T9205] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.068621][ T9205] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1811: bg 0: block 248: padding at end of block bitmap is not set [ 149.089451][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 149.154508][ T9205] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1811: Failed to acquire dquot type 1 [ 149.175737][ T9205] EXT4-fs (loop0): 1 truncate cleaned up [ 149.188276][ T9205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.208428][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'. [ 149.245396][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.259115][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.352007][ T9216] loop2: detected capacity change from 0 to 2048 [ 149.413724][ T9216] loop2: p1 p2 p3 [ 149.603817][ T9228] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 149.666746][ T9228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.724018][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 149.795447][ T9228] bond4 (unregistering): Released all slaves [ 151.526123][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 151.602525][ T9289] geneve2: entered promiscuous mode [ 151.607798][ T9289] geneve2: entered allmulticast mode [ 151.658591][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.667237][ T4279] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.696935][ T4279] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.712405][ T4279] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.900137][ T9314] 9pnet_fd: Insufficient options for proto=fd [ 151.974991][ T9331] __nla_validate_parse: 2 callbacks suppressed [ 151.975011][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 151.994500][ T9331] : left allmulticast mode [ 151.999654][ T9331] : left promiscuous mode [ 152.004874][ T9331] bridge0: port 3() entered disabled state [ 152.012659][ T9331] bridge_slave_1: left allmulticast mode [ 152.018413][ T9331] bridge_slave_1: left promiscuous mode [ 152.024376][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.034647][ T9331] bridge_slave_0: left allmulticast mode [ 152.040443][ T9331] bridge_slave_0: left promiscuous mode [ 152.046327][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.184561][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1857'. [ 152.687208][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 152.687226][ T29] audit: type=1326 audit(1760788939.572:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 152.770311][ T29] audit: type=1326 audit(1760788939.612:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 152.793988][ T29] audit: type=1326 audit(1760788939.612:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 152.817729][ T29] audit: type=1326 audit(1760788939.612:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 152.888308][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1869'. [ 152.927852][ T9480] bridge: RTM_NEWNEIGH with invalid ether address [ 152.965327][ T29] audit: type=1326 audit(1760788939.852:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 152.988933][ T29] audit: type=1326 audit(1760788939.852:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 153.039407][ T29] audit: type=1326 audit(1760788939.882:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 153.063021][ T29] audit: type=1326 audit(1760788939.882:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 153.086664][ T29] audit: type=1326 audit(1760788939.882:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 153.110170][ T29] audit: type=1326 audit(1760788939.882:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 153.277179][ T9502] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 153.291811][ T9502] bond0: entered promiscuous mode [ 153.297334][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.331514][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.346757][ T9502] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 153.357566][ T9502] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 153.378771][ T9502] bond0: (slave wireguard0): making interface the new active one [ 153.386731][ T9502] wireguard0: entered promiscuous mode [ 153.394690][ T9502] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 153.399634][ T9508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.411669][ T9508] IPv6: NLM_F_CREATE should be set when creating new route [ 153.418935][ T9508] IPv6: NLM_F_CREATE should be set when creating new route [ 153.476281][ T9508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.836894][ T9508] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 153.850407][ T9508] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 154.111583][ T9540] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1895'. [ 154.197962][ T9547] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 154.220913][ T9547] bond4: entered promiscuous mode [ 154.226531][ T9547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.245614][ T9547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.253280][ T9547] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 154.263879][ T9547] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 154.276526][ T9547] bond4: (slave wireguard0): making interface the new active one [ 154.284549][ T9547] wireguard0: entered promiscuous mode [ 154.293165][ T9547] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 154.293497][ T9555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.309411][ T9555] IPv6: NLM_F_CREATE should be set when creating new route [ 154.316661][ T9555] IPv6: NLM_F_CREATE should be set when creating new route [ 154.324183][ T9555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.335257][ T9555] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 154.356474][ T9555] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 154.473932][ T9560] loop3: detected capacity change from 0 to 8192 [ 154.502511][ T9560] loop3: p2 p3 p4 [ 154.506551][ T9560] loop3: p2 start 164919041 is beyond EOD, truncated [ 154.513430][ T9560] loop3: p3 size 66846464 extends beyond EOD, truncated [ 154.521432][ T9560] loop3: p4 size 37048832 extends beyond EOD, truncated [ 154.576075][ T9567] loop3: detected capacity change from 0 to 164 [ 154.595158][ T9567] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.609377][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1905'. [ 154.624119][ T9568] loop2: detected capacity change from 0 to 1024 [ 154.633343][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.785102][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.814891][ T9578] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1909'. [ 154.867773][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 154.923374][ T9586] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 154.945491][ T9586] bond5: entered promiscuous mode [ 154.958470][ T9586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.002589][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1918'. [ 155.016420][ T9586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.024119][ T9586] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 155.034835][ T9586] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 155.038438][ T9601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.051687][ T9601] IPv6: NLM_F_CREATE should be set when creating new route [ 155.058978][ T9601] IPv6: NLM_F_CREATE should be set when creating new route [ 155.068708][ T9586] bond5: (slave wireguard0): making interface the new active one [ 155.076579][ T9586] wireguard0: entered promiscuous mode [ 155.080451][ T9601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.090683][ T9586] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 155.116618][ T9601] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 155.128860][ T9601] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 155.351140][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'. [ 155.576652][ T9645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 155.583317][ T9645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.591196][ T9645] vhci_hcd vhci_hcd.0: Device attached [ 155.600202][ T9645] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1935'. [ 155.611098][ T9646] vhci_hcd: connection closed [ 155.611195][ T4267] vhci_hcd: stop threads [ 155.620224][ T4267] vhci_hcd: release socket [ 155.624693][ T4267] vhci_hcd: disconnect device [ 156.237803][ T9669] loop3: detected capacity change from 0 to 128 [ 156.247896][ T9669] syz.3.1943: attempt to access beyond end of device [ 156.247896][ T9669] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 156.261869][ T9669] syz.3.1943: attempt to access beyond end of device [ 156.261869][ T9669] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 156.275844][ T9669] buffer_io_error: 6 callbacks suppressed [ 156.275864][ T9669] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 156.290650][ T9669] syz.3.1943: attempt to access beyond end of device [ 156.290650][ T9669] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 156.304148][ T9669] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 156.357128][ T9676] netem: change failed [ 156.474742][ T9680] loop1: detected capacity change from 0 to 1024 [ 156.483877][ T9680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.563379][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.342268][ T9720] lo: entered promiscuous mode [ 157.347263][ T9720] lo: entered allmulticast mode [ 157.373221][ T9720] tunl0: entered promiscuous mode [ 157.378313][ T9720] tunl0: entered allmulticast mode [ 157.392167][ T9720] gre0: entered promiscuous mode [ 157.397319][ T9720] gre0: entered allmulticast mode [ 157.414450][ T9720] gretap0: entered promiscuous mode [ 157.419784][ T9720] gretap0: entered allmulticast mode [ 157.437807][ T9720] erspan0: entered promiscuous mode [ 157.443130][ T9720] erspan0: entered allmulticast mode [ 157.481188][ T9720] ip_vti0: entered promiscuous mode [ 157.486550][ T9720] ip_vti0: entered allmulticast mode [ 157.502072][ T9720] ip6_vti0: entered promiscuous mode [ 157.507595][ T9720] ip6_vti0: entered allmulticast mode [ 157.522537][ T9720] sit0: entered promiscuous mode [ 157.527561][ T9720] sit0: entered allmulticast mode [ 157.533408][ T9720] ip6tnl0: entered promiscuous mode [ 157.538706][ T9720] ip6tnl0: entered allmulticast mode [ 157.545216][ T9720] ip6gre0: entered promiscuous mode [ 157.550588][ T9720] ip6gre0: entered allmulticast mode [ 157.556661][ T9720] ip6gretap0: entered promiscuous mode [ 157.562194][ T9720] ip6gretap0: entered allmulticast mode [ 157.568459][ T9720] vcan0: entered promiscuous mode [ 157.573562][ T9720] vcan0: entered allmulticast mode [ 157.579658][ T9720] bond0: entered promiscuous mode [ 157.584814][ T9720] bond_slave_0: entered promiscuous mode [ 157.590670][ T9720] bond_slave_1: entered promiscuous mode [ 157.596547][ T9720] bond0: entered allmulticast mode [ 157.601752][ T9729] __nla_validate_parse: 3 callbacks suppressed [ 157.601773][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1965'. [ 157.617026][ T9720] bond_slave_0: entered allmulticast mode [ 157.622885][ T9720] bond_slave_1: entered allmulticast mode [ 157.630459][ T9720] team0: entered promiscuous mode [ 157.635564][ T9720] team_slave_0: entered promiscuous mode [ 157.641397][ T9720] team_slave_1: entered promiscuous mode [ 157.647342][ T9720] team0: entered allmulticast mode [ 157.652544][ T9720] team_slave_0: entered allmulticast mode [ 157.658305][ T9720] team_slave_1: entered allmulticast mode [ 157.683002][ T9720] : entered promiscuous mode [ 157.688659][ T9720] : entered allmulticast mode [ 157.833458][ T9720] nlmon0: entered promiscuous mode [ 157.838728][ T9720] nlmon0: entered allmulticast mode [ 157.861663][ T9720] caif0: entered promiscuous mode [ 157.866803][ T9720] caif0: entered allmulticast mode [ 157.872147][ T9720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.279356][ T29] kauditd_printk_skb: 1295 callbacks suppressed [ 158.279375][ T29] audit: type=1400 audit(1760788945.165:7456): avc: denied { bind } for pid=9739 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.323292][ T29] audit: type=1326 audit(1760788945.195:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.347564][ T29] audit: type=1400 audit(1760788945.195:7457): avc: denied { connect } for pid=9739 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.367732][ T29] audit: type=1326 audit(1760788945.195:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.391336][ T29] audit: type=1326 audit(1760788945.195:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.415159][ T29] audit: type=1326 audit(1760788945.195:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.438718][ T29] audit: type=1326 audit(1760788945.195:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.462514][ T29] audit: type=1326 audit(1760788945.195:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.485986][ T29] audit: type=1326 audit(1760788945.195:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.509525][ T29] audit: type=1326 audit(1760788945.215:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c069efc9 code=0x7ffc0000 [ 158.616534][ T9758] loop3: detected capacity change from 0 to 256 [ 158.820515][ T9749] cgroup: fork rejected by pids controller in /syz1 [ 159.388896][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1982'. [ 159.423926][T10263] syzkaller0: entered allmulticast mode [ 159.430733][T10263] syzkaller0: entered promiscuous mode [ 159.438660][T10263] syzkaller0 (unregistering): left allmulticast mode [ 159.445468][T10263] syzkaller0 (unregistering): left promiscuous mode [ 159.754030][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 159.833541][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'. [ 159.842566][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1992'. [ 159.851697][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'. [ 159.909519][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'. [ 159.958703][T10285] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 159.976343][T10285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.001632][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 160.012401][T10285] bond6 (unregistering): Released all slaves [ 160.087226][T10299] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 160.176399][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 161.052101][T10331] loop1: detected capacity change from 0 to 32768 [ 163.659873][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 163.899289][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 163.899308][ T29] audit: type=1400 audit(1760788950.796:8078): avc: denied { shutdown } for pid=10418 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.416599][ T29] audit: type=1326 audit(1760788951.306:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.440387][ T29] audit: type=1326 audit(1760788951.306:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.463993][ T29] audit: type=1326 audit(1760788951.306:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.487579][ T29] audit: type=1326 audit(1760788951.306:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.511062][ T29] audit: type=1326 audit(1760788951.306:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.534639][ T29] audit: type=1326 audit(1760788951.306:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.558216][ T29] audit: type=1326 audit(1760788951.306:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.581857][ T29] audit: type=1326 audit(1760788951.306:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.605446][ T29] audit: type=1326 audit(1760788951.306:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836df1efc9 code=0x7ffc0000 [ 164.680692][T10433] loop2: detected capacity change from 0 to 512 [ 164.747285][T10449] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 164.782990][T10455] xt_policy: output policy not valid in PREROUTING and INPUT [ 164.796182][T10433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.833134][T10433] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.049323][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.409322][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2055'. [ 165.429166][T10466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10466 comm=syz.2.2055 [ 165.444441][T10466] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 165.878832][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 165.892564][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2075'. [ 166.339325][T10532] lo: entered promiscuous mode [ 166.344175][T10532] lo: entered allmulticast mode [ 166.350876][T10532] tunl0: entered promiscuous mode [ 166.355969][T10532] tunl0: entered allmulticast mode [ 166.362243][T10532] gre0: entered promiscuous mode [ 166.367240][T10532] gre0: entered allmulticast mode [ 166.374084][T10532] gretap0: entered promiscuous mode [ 166.379385][T10532] gretap0: entered allmulticast mode [ 166.385578][T10532] erspan0: entered promiscuous mode [ 166.390927][T10532] erspan0: entered allmulticast mode [ 166.397686][T10532] ip_vti0: entered promiscuous mode [ 166.402923][T10532] ip_vti0: entered allmulticast mode [ 166.409233][T10532] ip6_vti0: entered promiscuous mode [ 166.414571][T10532] ip6_vti0: entered allmulticast mode [ 166.431551][T10532] sit0: entered promiscuous mode [ 166.436623][T10532] sit0: entered allmulticast mode [ 166.450893][T10532] ip6tnl0: entered promiscuous mode [ 166.456270][T10532] ip6tnl0: entered allmulticast mode [ 166.468771][T10532] ip6gre0: entered promiscuous mode [ 166.474103][T10532] ip6gre0: entered allmulticast mode [ 166.480990][T10532] syz_tun: entered promiscuous mode [ 166.486307][T10532] syz_tun: entered allmulticast mode [ 166.493149][T10532] vcan0: entered promiscuous mode [ 166.498340][T10532] vcan0: entered allmulticast mode [ 166.504691][T10532] bond0: entered promiscuous mode [ 166.509866][T10532] bond_slave_0: entered promiscuous mode [ 166.515683][T10532] bond_slave_1: entered promiscuous mode [ 166.521507][T10532] team0: entered promiscuous mode [ 166.526561][T10532] team_slave_0: entered promiscuous mode [ 166.532419][T10532] team_slave_1: entered promiscuous mode [ 166.538360][T10532] bond0: entered allmulticast mode [ 166.543515][T10532] bond_slave_0: entered allmulticast mode [ 166.549447][T10532] bond_slave_1: entered allmulticast mode [ 166.555209][T10532] team0: entered allmulticast mode [ 166.560402][T10532] team_slave_0: entered allmulticast mode [ 166.566191][T10532] team_slave_1: entered allmulticast mode [ 166.630638][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.682052][T10532] dummy0: entered allmulticast mode [ 166.689166][T10532] nlmon0: entered promiscuous mode [ 166.694348][T10532] nlmon0: entered allmulticast mode [ 166.702045][T10532] caif0: entered promiscuous mode [ 166.707126][T10532] caif0: entered allmulticast mode [ 166.712330][T10532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.745914][T10539] tipc: Enabled bearer , priority 0 [ 166.753870][T10538] tipc: Resetting bearer [ 166.797932][T10538] tipc: Disabling bearer [ 167.503028][T10574] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2097'. [ 168.136218][T10591] netlink: 'syz.4.2102': attribute type 4 has an invalid length. [ 169.159536][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 169.189960][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 169.794104][T10644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2124'. [ 169.902110][T10659] bond0: (slave dummy0): Releasing backup interface [ 169.909426][T10659] bridge_slave_0: left allmulticast mode [ 169.915168][T10659] bridge_slave_0: left promiscuous mode [ 169.920987][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.930307][T10659] bridge_slave_1: left allmulticast mode [ 169.936216][T10659] bridge_slave_1: left promiscuous mode [ 169.942026][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.959841][T10659] bond0: (slave bond_slave_0): Releasing backup interface [ 169.968084][T10659] bond0: (slave bond_slave_1): Releasing backup interface [ 169.976763][T10659] team0: Port device team_slave_0 removed [ 169.983569][T10659] team0: Port device team_slave_1 removed [ 169.989728][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.997628][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.006127][T10659] bond1: (slave veth5): Releasing active interface [ 170.015538][T10659] bond5: (slave wireguard0): Releasing backup interface [ 170.022657][T10659] wireguard0: left promiscuous mode [ 170.028024][T10659] bond5: (slave wireguard1): making interface the new active one [ 170.035832][T10659] wireguard1: entered promiscuous mode [ 170.045748][T10659] bond5: (slave wireguard1): Releasing backup interface [ 170.052792][T10659] wireguard1: left promiscuous mode [ 170.061910][T10663] geneve0: entered allmulticast mode [ 170.556090][T10693] 9pnet_fd: p9_fd_create_tcp (10693): problem connecting socket to 127.0.0.1 [ 170.738269][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 170.738314][ T29] audit: type=1326 audit(1760788957.629:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.768207][ T29] audit: type=1326 audit(1760788957.629:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.792007][ T29] audit: type=1326 audit(1760788957.629:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.815560][ T29] audit: type=1326 audit(1760788957.629:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.839317][ T29] audit: type=1326 audit(1760788957.629:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.862884][ T29] audit: type=1326 audit(1760788957.629:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.886491][ T29] audit: type=1326 audit(1760788957.629:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.910029][ T29] audit: type=1326 audit(1760788957.629:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 170.981109][ T29] audit: type=1326 audit(1760788957.759:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 171.004913][ T29] audit: type=1326 audit(1760788957.759:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b65efc9 code=0x7ffc0000 [ 171.391928][T10723] tipc: Enabling of bearer rejected, failed to enable media [ 171.511454][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 171.651890][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 171.705229][T10732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.724097][T10735] vlan0: entered allmulticast mode [ 171.729316][T10735] bond6: entered allmulticast mode [ 172.161715][T10754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2163'. [ 173.126839][T10811] 9pnet_fd: Insufficient options for proto=fd [ 173.518799][T10866] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2179'. [ 173.597043][T10866] 0X: renamed from caif0 [ 173.620718][T10866] 0X: left promiscuous mode [ 173.625687][T10866] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 173.815149][T10889] tipc: Enabling of bearer rejected, failed to enable media [ 173.897715][T10893] bridge: RTM_NEWNEIGH with invalid ether address [ 174.058947][T10901] netlink: '+}[@': attribute type 10 has an invalid length. [ 174.298944][T10911] tipc: Started in network mode [ 174.303988][T10911] tipc: Node identity ac14140f, cluster identity 4711 [ 174.315110][T10911] tipc: New replicast peer: 255.255.255.83 [ 174.321075][T10911] tipc: Enabled bearer , priority 10 [ 174.702639][T10939] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2210'. [ 175.053996][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2224'. [ 175.127123][T10969] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 175.127123][T10969] program syz.1.2222 not setting count and/or reply_len properly [ 175.383507][T11011] bridge3: entered allmulticast mode [ 175.433646][ T3406] tipc: Node number set to 2886997007 [ 175.758447][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 175.758466][ T29] audit: type=1326 audit(1760788962.651:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.822990][ T29] audit: type=1326 audit(1760788962.651:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.846552][ T29] audit: type=1326 audit(1760788962.651:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.847659][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2243'. [ 175.870124][ T29] audit: type=1326 audit(1760788962.651:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.870173][ T29] audit: type=1326 audit(1760788962.651:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.879353][T11025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2243'. [ 175.902709][ T29] audit: type=1326 audit(1760788962.651:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.902754][ T29] audit: type=1326 audit(1760788962.651:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 175.982903][ T29] audit: type=1326 audit(1760788962.651:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 176.006542][ T29] audit: type=1326 audit(1760788962.651:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 176.030176][ T29] audit: type=1326 audit(1760788962.651:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 176.057296][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2242'. [ 176.420561][T11048] loop1: detected capacity change from 0 to 512 [ 176.435522][T11048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2250: error while reading EA inode 32 err=-116 [ 176.457309][T11048] EXT4-fs (loop1): Remounting filesystem read-only [ 176.467179][T11048] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 176.482158][T11048] EXT4-fs (loop1): 1 orphan inode deleted [ 176.490623][T11048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.584466][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.725528][T11054] loop1: detected capacity change from 0 to 2048 [ 176.763910][T11054] loop1: p1 < > p4 [ 176.781048][T11054] loop1: p4 size 8388608 extends beyond EOD, truncated [ 177.107364][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 177.197041][T11077] netlink: 'syz.4.2260': attribute type 13 has an invalid length. [ 177.532283][ T4297] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.553456][ T4297] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.598214][ T4297] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.621413][ T4297] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.708877][T11088] wg2: entered promiscuous mode [ 177.718587][T11088] wg2: entered allmulticast mode [ 177.790574][T11099] loop1: detected capacity change from 0 to 512 [ 177.826152][T11099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.865233][T11099] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.971019][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.226107][T11122] loop9: detected capacity change from 0 to 8 [ 178.236134][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.246391][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.257336][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.267590][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.276833][T11122] loop9: unable to read partition table [ 178.290217][T11122] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.290217][T11122] ) failed (rc=-5) [ 178.364673][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 178.392823][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 178.424007][T11133] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2282'. [ 178.436869][T11133] batadv1: entered promiscuous mode [ 178.442214][T11133] batadv1: entered allmulticast mode [ 178.552855][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 178.879536][T11152] loop2: detected capacity change from 0 to 256 [ 178.911411][T11152] msdos: Bad value for 'time_offset' [ 178.979596][T11153] netem: change failed [ 179.162170][T11155] loop1: detected capacity change from 0 to 1024 [ 179.262158][T11155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.282230][T11155] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.305690][T11155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.721808][T11202] loop3: detected capacity change from 0 to 512 [ 179.743515][T11202] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 179.765913][T11206] __nla_validate_parse: 2 callbacks suppressed [ 179.765933][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2311'. [ 179.875186][T11218] syzkaller0: entered promiscuous mode [ 179.880882][T11218] syzkaller0: entered allmulticast mode [ 179.924395][T11224] program syz.3.2319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.970821][T11228] netlink: 'syz.3.2321': attribute type 83 has an invalid length. [ 180.684791][T11254] veth0_vlan: left promiscuous mode [ 180.690735][T11254] veth0_vlan: entered promiscuous mode [ 180.814715][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 180.814731][ T29] audit: type=1326 audit(1760788967.714:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 180.850646][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 180.875387][ T29] audit: type=1326 audit(1760788967.724:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 180.899095][ T29] audit: type=1326 audit(1760788967.744:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff99959f003 code=0x7ffc0000 [ 180.922597][ T29] audit: type=1326 audit(1760788967.744:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff99959f003 code=0x7ffc0000 [ 180.946263][ T29] audit: type=1326 audit(1760788967.744:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 180.969833][ T29] audit: type=1326 audit(1760788967.744:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 180.993469][ T29] audit: type=1326 audit(1760788967.764:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 181.017047][ T29] audit: type=1326 audit(1760788967.764:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 181.040639][ T29] audit: type=1326 audit(1760788967.764:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 181.133801][ T29] audit: type=1326 audit(1760788967.874:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99959efc9 code=0x7ffc0000 [ 181.156438][T11282] loop3: detected capacity change from 0 to 128 [ 181.178587][T11282] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.192083][T11282] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.199094][T11286] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 181.246685][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.250472][T11286] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 181.491661][T11295] loop3: detected capacity change from 0 to 512 [ 181.498220][T11295] EXT4-fs: Ignoring removed nobh option [ 181.575438][T11295] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2343: corrupted inode contents [ 181.582953][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 181.596399][T11295] EXT4-fs (loop3): Remounting filesystem read-only [ 181.609899][T11299] macvlan0: entered promiscuous mode [ 181.615310][T11299] macvlan0: entered allmulticast mode [ 181.621954][T11299] bond4: entered promiscuous mode [ 181.623427][T11295] EXT4-fs (loop3): 1 truncate cleaned up [ 181.627455][T11299] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 181.641056][T11299] bond4: left promiscuous mode [ 181.696844][T11295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.733673][T11295] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.750406][T11304] netlink: 'syz.2.2346': attribute type 2 has an invalid length. [ 181.758272][T11304] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 181.771000][T11295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.790498][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2347'. [ 181.827422][T11309] bridge0: entered allmulticast mode [ 181.903527][T11316] loop3: detected capacity change from 0 to 512 [ 181.928689][T11316] EXT4-fs: Ignoring removed nobh option [ 181.942100][T11316] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2352: corrupted inode contents [ 181.960710][T11316] EXT4-fs (loop3): Remounting filesystem read-only [ 181.970673][T11316] EXT4-fs (loop3): 1 truncate cleaned up [ 181.986478][T11316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.999374][T11316] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.032421][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.127694][T11324] loop2: detected capacity change from 0 to 8192 [ 182.160639][T11324] vfat: Unknown parameter '' [ 182.165894][T11334] loop3: detected capacity change from 0 to 1024 [ 182.180471][T11334] EXT4-fs: Ignoring removed nobh option [ 182.186321][T11334] EXT4-fs: Ignoring removed bh option [ 182.208865][T11337] v: renamed from ip6_vti0 (while UP) [ 182.258858][T11334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.487460][T11341] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2358: Allocating blocks 497-513 which overlap fs metadata [ 182.505013][T11341] EXT4-fs (loop3): Remounting filesystem read-only [ 182.547951][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 182.578358][T11341] EXT4-fs (loop3): pa ffff8881071ce2a0: logic 128, phys. 385, len 8 [ 182.588660][T11324] netem: change failed [ 182.638553][ T6473] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.887349][T11362] tipc: Enabling of bearer rejected, failed to enable media [ 183.066941][T11356] chnl_net:caif_netlink_parms(): no params data found [ 183.207647][T11384] xt_connbytes: Forcing CT accounting to be enabled [ 183.261484][T11384] Cannot find set identified by id 0 to match [ 183.281586][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.288808][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.298384][T11356] bridge_slave_0: entered allmulticast mode [ 183.305306][T11356] bridge_slave_0: entered promiscuous mode [ 183.312449][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.319663][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.327246][T11356] bridge_slave_1: entered allmulticast mode [ 183.336943][T11356] bridge_slave_1: entered promiscuous mode [ 183.374720][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.395089][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.416587][ T4283] bond2 (unregistering): (slave ip6gretap0): Releasing active interface [ 183.476195][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 183.731378][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.740255][ T4283] bond_slave_0: left promiscuous mode [ 183.745707][ T4283] bond_slave_0: left allmulticast mode [ 183.751981][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.760827][ T4283] bond_slave_1: left promiscuous mode [ 183.766314][ T4283] bond_slave_1: left allmulticast mode [ 183.772757][ T4283] bond0 (unregistering): (slave team0): Releasing backup interface [ 183.781297][ T4283] bond0 (unregistering): Released all slaves [ 183.789805][ T4283] bond1 (unregistering): Released all slaves [ 183.798485][ T4283] bond2 (unregistering): Released all slaves [ 183.806841][ T4283] bond3 (unregistering): Released all slaves [ 183.816019][ T4283] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 183.825042][ T4283] wireguard0: left promiscuous mode [ 183.831116][ T4283] bond4 (unregistering): (slave wireguard1): Releasing backup interface [ 183.839891][ T4283] bond4 (unregistering): Released all slaves [ 183.877827][T11356] team0: Port device team_slave_0 added [ 183.914516][ T4283] tipc: Disabling bearer [ 183.919570][ T4283] tipc: Left network mode [ 183.920420][T11356] team0: Port device team_slave_1 added [ 183.977606][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.984664][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.010622][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.054048][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.061158][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.087229][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.181861][ T4283] team_slave_1 (unregistering): left promiscuous mode [ 184.188706][ T4283] team_slave_1 (unregistering): left allmulticast mode [ 184.196227][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 184.208190][ T4283] team_slave_0 (unregistering): left promiscuous mode [ 184.215046][ T4283] team_slave_0 (unregistering): left allmulticast mode [ 184.237266][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 184.376513][T11356] hsr_slave_0: entered promiscuous mode [ 184.385556][T11356] hsr_slave_1: entered promiscuous mode [ 184.630767][ T4283] IPVS: stop unused estimator thread 0... [ 184.790234][T11430] bond0: (slave bond_slave_1): Releasing backup interface [ 184.798250][T11430] bond_slave_1: left promiscuous mode [ 184.803843][T11430] bond_slave_1: left allmulticast mode [ 184.871702][T11430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2387'. [ 184.944125][T11356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.991057][T11356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.010341][T11356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.032789][T11356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.261853][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.283284][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.299831][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.307019][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.338101][T11356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.348731][T11356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.362662][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.369772][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.451689][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.551009][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 185.661725][T11356] veth0_vlan: entered promiscuous mode [ 185.712231][T11455] batman_adv: batadv0: Removing interface: veth1_vlan [ 185.721055][T11461] netlink: 'syz.0.2393': attribute type 13 has an invalid length. [ 185.741084][T11459] netlink: 'syz.2.2392': attribute type 30 has an invalid length. [ 185.767395][T11462] loop2: detected capacity change from 0 to 1024 [ 185.774805][T11462] EXT4-fs: inline encryption not supported [ 185.785306][T11462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.787259][T11356] veth1_vlan: entered promiscuous mode [ 185.836433][T11462] EXT4-fs (loop2): 1 truncate cleaned up [ 185.846347][T11462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.875538][T11356] veth0_macvtap: entered promiscuous mode [ 185.891104][T11356] veth1_macvtap: entered promiscuous mode [ 185.936939][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.977155][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.990420][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.999966][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.007640][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.022373][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.044948][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 186.044965][ T29] audit: type=1400 audit(1760788972.946:8728): avc: denied { mounton } for pid=11356 comm="syz-executor" path="/root/syzkaller.SgIe71/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 186.061826][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'. [ 186.089704][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.115647][ T29] audit: type=1400 audit(1760788972.996:8729): avc: denied { mount } for pid=11356 comm="syz-executor" name="/" dev="gadgetfs" ino=4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 186.138324][ T29] audit: type=1326 audit(1760788973.006:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.162165][ T29] audit: type=1326 audit(1760788973.006:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.185801][ T29] audit: type=1326 audit(1760788973.006:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effe0dbf003 code=0x7ffc0000 [ 186.209456][ T29] audit: type=1326 audit(1760788973.006:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effe0dbf003 code=0x7ffc0000 [ 186.232865][ T29] audit: type=1326 audit(1760788973.006:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.256547][ T29] audit: type=1326 audit(1760788973.006:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.278137][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 186.280163][ T29] audit: type=1326 audit(1760788973.006:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.298327][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'. [ 186.312707][ T29] audit: type=1326 audit(1760788973.006:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 186.314126][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 186.357419][T11483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=11483 comm=syz.1.2399 [ 186.387722][T11490] loop3: detected capacity change from 0 to 512 [ 186.395770][T11490] EXT4-fs: Ignoring removed bh option [ 186.397461][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 186.411486][T11490] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 186.432051][T11490] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.440118][T11490] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 186.451027][T11490] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.457470][T11490] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.2366: Bad quota inum: 4294967291, type: 0 [ 186.475477][T11490] EXT4-fs (loop3): Remounting filesystem read-only [ 186.482123][T11490] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 186.497587][T11490] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 186.504795][T11490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.552246][T11356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.578286][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 186.653777][T11501] xt_l2tp: wrong L2TP version: 1 [ 186.684337][T11505] pimreg: entered allmulticast mode [ 186.691808][T11505] pimreg: left allmulticast mode [ 186.928311][T11513] xfrm0: entered promiscuous mode [ 186.933508][T11513] xfrm0: entered allmulticast mode [ 187.042573][T11523] loop2: detected capacity change from 0 to 512 [ 187.056284][T11523] vfat: Bad value for 'allow_utime' [ 187.073370][T11527] : (slave dummy0): Releasing backup interface [ 187.093959][T11527] : (slave bond_slave_0): Releasing backup interface [ 187.104593][T11527] : (slave bond_slave_1): Releasing backup interface [ 187.116267][T11527] team0: Port device team_slave_0 removed [ 187.126623][T11527] bond2: (slave veth3): Releasing active interface [ 187.137421][T11527] bond0: (slave wireguard0): Releasing backup interface [ 187.144866][T11527] wireguard0: left promiscuous mode [ 187.150302][T11527] bond0: (slave wireguard1): making interface the new active one [ 187.158188][T11527] wireguard1: entered promiscuous mode [ 187.168405][T11527] bond0: (slave wireguard1): Releasing backup interface [ 187.189025][T11527] wireguard1: left promiscuous mode [ 188.097446][T11576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11576 comm=syz.2.2433 [ 188.115589][T11576] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 188.145090][T11576] bond5: (slave veth15): Enslaving as an active interface with a down link [ 188.160143][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 188.170832][T11576] bond5 (unregistering): (slave veth15): Releasing active interface [ 188.180623][T11576] bond5 (unregistering): Released all slaves [ 188.553689][T11595] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 188.923335][T11618] tipc: Cannot configure node identity twice [ 189.652327][T11625] netlink: 'syz.1.2460': attribute type 30 has an invalid length. [ 189.686173][T11628] vlan2: entered allmulticast mode [ 189.691437][T11628] ip6gretap0: entered allmulticast mode [ 189.707354][T11632] loop1: detected capacity change from 0 to 1024 [ 189.714245][T11632] EXT4-fs: inline encryption not supported [ 189.722166][T11632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.730109][T11632] EXT4-fs (loop1): 1 truncate cleaned up [ 189.736483][T11632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.769019][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.933480][T11651] v: renamed from ip6_vti0 (while UP) [ 190.259947][T11683] __nla_validate_parse: 2 callbacks suppressed [ 190.260047][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2466'. [ 190.407644][T11692] netlink: 'syz.3.2467': attribute type 13 has an invalid length. [ 190.474602][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.481895][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.594350][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.606460][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2468'. [ 190.620102][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.850757][ T4324] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.516447][ T4324] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.525425][ T4324] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.540799][ T4324] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.688044][T11720] loop1: detected capacity change from 0 to 2048 [ 191.746605][T11722] loop2: detected capacity change from 0 to 2048 [ 191.748534][T11720] GPT:first_usable_lbas don't match. [ 191.753598][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 191.753626][ T29] audit: type=1326 audit(1760788978.639:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.758337][T11720] GPT:34 != 290 [ 191.758351][T11720] GPT: Use GNU Parted to correct GPT errors. [ 191.758452][T11720] loop1: p1 p2 p3 [ 191.764547][ T29] audit: type=1326 audit(1760788978.639:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.823809][ T29] audit: type=1326 audit(1760788978.639:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.846803][ T29] audit: type=1326 audit(1760788978.639:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.869806][ T29] audit: type=1326 audit(1760788978.639:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.892824][ T29] audit: type=1326 audit(1760788978.639:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effe0dbefc9 code=0x7ffc0000 [ 191.915917][ T29] audit: type=1326 audit(1760788978.639:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effe0dbf003 code=0x7ffc0000 [ 191.938881][ T29] audit: type=1326 audit(1760788978.639:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effe0dbda7f code=0x7ffc0000 [ 191.961866][ T29] audit: type=1326 audit(1760788978.649:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7effe0dbf057 code=0x7ffc0000 [ 191.984955][ T29] audit: type=1326 audit(1760788978.649:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effe0dbd810 code=0x7ffc0000 [ 192.062958][T11722] loop2: p2 p3 p7 [ 192.141435][T11737] xt_connbytes: Forcing CT accounting to be enabled [ 192.148610][T11737] set match dimension is over the limit! [ 192.597798][T11747] netlink: 'syz.0.2480': attribute type 30 has an invalid length. [ 192.809630][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2484'. [ 193.050950][T11775] loop2: detected capacity change from 0 to 128 [ 193.079875][T11775] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.107705][T11775] ext4 filesystem being mounted at /483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.150026][T11775] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 63: comm syz.2.2493: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 193.174236][T11775] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 193.186649][T11775] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 63: comm syz.2.2493: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 193.218280][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.343682][T11811] loop1: detected capacity change from 0 to 1024 [ 194.350650][T11811] EXT4-fs: Ignoring removed nobh option [ 194.356464][T11811] EXT4-fs: Ignoring removed bh option [ 194.385426][T11811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.463417][T11815] EXT4-fs (loop1): shut down requested (0) [ 194.477786][T11807] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2504'. [ 194.695736][T11819] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2509'. [ 194.727825][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.787582][T11826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11826 comm=syz.4.2513 [ 194.800965][T11826] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 194.842790][T11826] bond5: (slave veth17): Enslaving as an active interface with a down link [ 194.883346][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 194.893187][T11836] loop2: detected capacity change from 0 to 512 [ 194.904858][T11836] EXT4-fs: Ignoring removed bh option [ 194.915287][T11826] bond5 (unregistering): (slave veth17): Releasing active interface [ 194.924495][T11836] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 194.941282][T11826] bond5 (unregistering): Released all slaves [ 194.974225][T11836] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 194.982267][T11836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 194.994464][T11836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.000935][T11836] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.2516: Bad quota inum: 4294967291, type: 0 [ 195.019775][T11836] EXT4-fs (loop2): Remounting filesystem read-only [ 195.026373][T11836] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 195.041949][T11836] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 195.051184][T11840] v: renamed from ip6_vti0 [ 195.063943][T11836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.154129][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 195.181966][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'. [ 195.194423][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.321654][T11855] loop2: detected capacity change from 0 to 128 [ 195.486972][T11863] ================================================================== [ 195.495120][T11863] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 195.502266][T11863] [ 195.504611][T11863] write to 0xffff8881005fec14 of 4 bytes by task 11855 on cpu 1: [ 195.512342][T11863] xas_set_mark+0x12b/0x140 [ 195.516875][T11863] __folio_start_writeback+0x155/0x390 [ 195.522370][T11863] mpage_writepages+0xd18/0x1250 [ 195.527350][T11863] fat_writepages+0x24/0x30 [ 195.531894][T11863] do_writepages+0x1c6/0x310 [ 195.536514][T11863] file_write_and_wait_range+0x156/0x2c0 [ 195.542192][T11863] __generic_file_fsync+0x46/0x140 [ 195.547346][T11863] fat_file_fsync+0x49/0x100 [ 195.551978][T11863] vfs_fsync_range+0x10d/0x130 [ 195.556778][T11863] generic_file_write_iter+0x1b8/0x2f0 [ 195.562268][T11863] iter_file_splice_write+0x666/0xa60 [ 195.567668][T11863] direct_splice_actor+0x156/0x2a0 [ 195.572816][T11863] splice_direct_to_actor+0x312/0x680 [ 195.578393][T11863] do_splice_direct+0xda/0x150 [ 195.583306][T11863] do_sendfile+0x380/0x650 [ 195.587849][T11863] __x64_sys_sendfile64+0x105/0x150 [ 195.593088][T11863] x64_sys_call+0x2bb4/0x3000 [ 195.597812][T11863] do_syscall_64+0xd2/0x200 [ 195.602445][T11863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.608460][T11863] [ 195.610824][T11863] read to 0xffff8881005fec14 of 4 bytes by task 11863 on cpu 0: [ 195.618482][T11863] xas_find_marked+0x5dc/0x620 [ 195.623377][T11863] find_get_entry+0x5d/0x380 [ 195.628005][T11863] filemap_get_folios_tag+0x92/0x210 [ 195.633342][T11863] writeback_iter+0x4bb/0x820 [ 195.638056][T11863] mpage_writepages+0x87/0x1250 [ 195.642966][T11863] fat_writepages+0x24/0x30 [ 195.647514][T11863] do_writepages+0x1c6/0x310 [ 195.652129][T11863] file_write_and_wait_range+0x156/0x2c0 [ 195.657807][T11863] __generic_file_fsync+0x46/0x140 [ 195.662951][T11863] fat_file_fsync+0x49/0x100 [ 195.667565][T11863] vfs_fsync_range+0x10d/0x130 [ 195.672348][T11863] generic_file_write_iter+0x1b8/0x2f0 [ 195.677830][T11863] iter_file_splice_write+0x666/0xa60 [ 195.683228][T11863] direct_splice_actor+0x156/0x2a0 [ 195.688358][T11863] splice_direct_to_actor+0x312/0x680 [ 195.693748][T11863] do_splice_direct+0xda/0x150 [ 195.698542][T11863] do_sendfile+0x380/0x650 [ 195.703000][T11863] __x64_sys_sendfile64+0x105/0x150 [ 195.708239][T11863] x64_sys_call+0x2bb4/0x3000 [ 195.712943][T11863] do_syscall_64+0xd2/0x200 [ 195.717487][T11863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.723410][T11863] [ 195.725745][T11863] value changed: 0x0a000021 -> 0x04000021 [ 195.731484][T11863] [ 195.733817][T11863] Reported by Kernel Concurrency Sanitizer on: [ 195.739999][T11863] CPU: 0 UID: 0 PID: 11863 Comm: syz.2.2522 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.749841][T11863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.759929][T11863] ================================================================== [ 195.775256][T11862] loop3: detected capacity change from 0 to 1024 [ 195.808081][T11861] loop1: detected capacity change from 0 to 8192 [ 195.814932][T11861] vfat: Unknown parameter '' [ 195.814989][T11862] EXT4-fs: Ignoring removed orlov option [ 195.838903][T11862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.960966][T11356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.133965][T11863] syz.2.2522: attempt to access beyond end of device [ 196.133965][T11863] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 196.147594][T11863] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 196.163624][T11855] syz.2.2522: attempt to access beyond end of device [ 196.163624][T11855] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 196.177162][T11855] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 196.207118][T11855] syz.2.2522: attempt to access beyond end of device [ 196.207118][T11855] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 196.220607][T11855] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 196.337990][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'.