last executing test programs: 20.775477933s ago: executing program 1 (id=1401): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065"], 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 20.734210143s ago: executing program 1 (id=1404): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) 20.629349834s ago: executing program 1 (id=1405): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 20.495224916s ago: executing program 1 (id=1407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) r1 = open(&(0x7f0000000000)='./file1\x00', 0x802, 0x4) fallocate(r1, 0x0, 0x0, 0x1001f0) 20.130583161s ago: executing program 1 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0x0, r0, 0x0}]) 19.855009885s ago: executing program 1 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 19.833843245s ago: executing program 32 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 14.651203762s ago: executing program 3 (id=1589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) 14.586092953s ago: executing program 3 (id=1591): r0 = syz_io_uring_setup(0x6b0f, &(0x7f00000003c0)={0x0, 0xfefffffe, 0x10100, 0x5, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 14.535956723s ago: executing program 3 (id=1593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2}}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 14.519838533s ago: executing program 3 (id=1595): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 14.405213245s ago: executing program 3 (id=1598): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xffff}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7c}]}}]}, 0x50}}, 0x8840) 14.145756528s ago: executing program 3 (id=1608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 14.145339478s ago: executing program 33 (id=1608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 2.865823724s ago: executing program 2 (id=1976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r2, r3, 0x0) 2.833077314s ago: executing program 2 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kmem_cache_free\x00', r0, 0x0, 0x8000}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r1, 0x1) 2.712347706s ago: executing program 2 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002700), 0x0, 0x800025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000340)=ANY=[], 0x60) 2.705623886s ago: executing program 2 (id=1982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.570521207s ago: executing program 2 (id=1989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x3}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.987739065s ago: executing program 4 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 1.960263645s ago: executing program 4 (id=2020): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") openat(0xffffffffffffff9c, 0x0, 0xc082, 0x1db) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) 1.816698777s ago: executing program 4 (id=2027): io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close_range(r0, r0, 0x200000000000000) 1.486346092s ago: executing program 0 (id=2045): unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.294141814s ago: executing program 2 (id=2050): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.293817264s ago: executing program 34 (id=2050): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 893.761329ms ago: executing program 4 (id=2060): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff4}}]}}]}, 0x48}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 892.938449ms ago: executing program 4 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x2, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000680)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) 868.217529ms ago: executing program 4 (id=2064): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TCXONC(r0, 0x540a, 0x3) 581.825243ms ago: executing program 5 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1, 0x40}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 527.374514ms ago: executing program 5 (id=2071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000100)="52000300", 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x4800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000580)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 513.219754ms ago: executing program 0 (id=2072): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd5, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 413.743225ms ago: executing program 5 (id=2073): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="9f", 0x1}], 0x1}}], 0x1, 0x45) 413.195665ms ago: executing program 6 (id=2074): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) 405.188615ms ago: executing program 0 (id=2075): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) setuid(0x0) 344.731536ms ago: executing program 6 (id=2076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffffff8}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 241.943038ms ago: executing program 0 (id=2077): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 175.718048ms ago: executing program 5 (id=2078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) 166.235278ms ago: executing program 6 (id=2079): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 108.105119ms ago: executing program 5 (id=2080): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40000) bind$tipc(r1, 0x0, 0x0) 96.766199ms ago: executing program 6 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e80"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 96.182899ms ago: executing program 0 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 79.225489ms ago: executing program 0 (id=2083): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_ignore}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 853.05µs ago: executing program 6 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x76}, 0xe) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 387.85µs ago: executing program 5 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 0s ago: executing program 6 (id=2086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000002c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): link: 4 bytes leftover after parsing attributes in process `+}[@'. [ 41.291100][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 41.320148][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.335096][ T4754] bridge_slave_1 (unregistering): left allmulticast mode [ 41.342230][ T4754] bridge_slave_1 (unregistering): left promiscuous mode [ 41.349242][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.388268][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 41.395795][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 41.403255][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 41.412937][ T36] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 41.441677][ T4770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 41.552586][ T4784] ref_ctr_offset mismatch. inode: 0x2ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 41.638984][ T4790] loop3: detected capacity change from 0 to 8192 [ 41.647268][ T4790] vfat: Unknown parameter '�!T.yՄ * #' [ 41.826702][ T4799] loop4: detected capacity change from 0 to 512 [ 41.842353][ T4799] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.878732][ T4799] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 41.889868][ T4799] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.525: attempt to clear invalid blocks 2 len 1 [ 41.912518][ T4799] EXT4-fs (loop4): Remounting filesystem read-only [ 41.923860][ T4816] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.945170][ T4799] EXT4-fs (loop4): 1 truncate cleaned up [ 41.958696][ T4799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.005548][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.057208][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 42.076343][ T4834] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.096081][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 42.107641][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 42.168690][ T4852] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.377802][ T4888] vlan2: entered allmulticast mode [ 42.505122][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 42.505145][ T29] audit: type=1326 audit(1746354282.141:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.556685][ T29] audit: type=1326 audit(1746354282.141:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.580298][ T29] audit: type=1326 audit(1746354282.141:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.603707][ T29] audit: type=1326 audit(1746354282.141:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.627066][ T29] audit: type=1326 audit(1746354282.141:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.650394][ T29] audit: type=1326 audit(1746354282.141:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.673781][ T29] audit: type=1326 audit(1746354282.151:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.824641][ T29] audit: type=1326 audit(1746354282.351:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.848132][ T29] audit: type=1326 audit(1746354282.351:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 42.871668][ T29] audit: type=1400 audit(1746354282.411:1050): avc: denied { read } for pid=4902 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.433297][ T4936] ip6gretap0: entered promiscuous mode [ 43.438839][ T4936] ip6gretap0: entered allmulticast mode [ 44.042540][ T4974] ------------[ cut here ]------------ [ 44.048081][ T4974] WARNING: CPU: 0 PID: 4974 at mm/page_alloc.c:4946 __alloc_frozen_pages_noprof+0x218/0x360 [ 44.058330][ T4974] Modules linked in: [ 44.062282][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.2.605 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 44.074698][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.076314][ T4972] loop4: detected capacity change from 0 to 8192 [ 44.084847][ T4974] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 44.084884][ T4974] Code: 83 3d 63 b5 50 05 02 72 0e 48 83 b8 a0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 52 b2 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 44.117651][ T4974] RSP: 0018:ffffc90000a27aa8 EFLAGS: 00010246 [ 44.123886][ T4974] RAX: 22c809aadac76f00 RBX: 0000000000000016 RCX: 0000000000000000 [ 44.132019][ T4974] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 44.140027][ T4974] RBP: 0000000000000dc0 R08: ffff888119e1ed98 R09: 0000000000000000 [ 44.148147][ T4974] R10: ffff8881194f6840 R11: 00018881194f6840 R12: ffffc90000a27d38 [ 44.156217][ T4974] R13: 00000000616c6572 R14: 0000000000040dc0 R15: 0000000000000000 [ 44.164240][ T4974] FS: 00007f5634f976c0(0000) GS:ffff8882aee50000(0000) knlGS:0000000000000000 [ 44.173283][ T4974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.179930][ T4974] CR2: 0000200000001000 CR3: 000000011ac72000 CR4: 00000000003506f0 [ 44.188005][ T4974] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 44.196034][ T4974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 44.204256][ T4974] Call Trace: [ 44.207549][ T4974] [ 44.210499][ T4974] __alloc_pages_noprof+0x9/0x20 [ 44.215657][ T4974] ___kmalloc_large_node+0x73/0x130 [ 44.221082][ T4974] __kmalloc_large_node_noprof+0x16/0xa0 [ 44.227001][ T4974] __kmalloc_noprof+0x2ab/0x3e0 [ 44.232093][ T4974] ? hashtab_init+0x9b/0xe0 [ 44.236695][ T4974] hashtab_init+0x9b/0xe0 [ 44.241110][ T4974] symtab_init+0x2c/0x40 [ 44.245383][ T4974] policydb_read+0x516/0x1330 [ 44.250097][ T4974] ? security_load_policy+0x90/0x890 [ 44.255484][ T4974] security_load_policy+0xba/0x890 [ 44.260664][ T4974] ? rep_movs_alternative+0x4a/0x90 [ 44.265934][ T4974] sel_write_load+0x1d4/0x380 [ 44.270799][ T4974] ? __pfx_sel_write_load+0x10/0x10 [ 44.276174][ T4974] vfs_write+0x266/0x8d0 [ 44.280447][ T4974] ? __rcu_read_unlock+0x4f/0x70 [ 44.285542][ T4974] ? __fget_files+0x184/0x1c0 [ 44.290346][ T4974] ksys_write+0xda/0x1a0 [ 44.294692][ T4974] __x64_sys_write+0x40/0x50 [ 44.299318][ T4974] x64_sys_call+0x2cdd/0x2fb0 [ 44.304084][ T4974] do_syscall_64+0xd0/0x1a0 [ 44.308622][ T4974] ? clear_bhb_loop+0x25/0x80 [ 44.313370][ T4974] ? clear_bhb_loop+0x25/0x80 [ 44.318164][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.324131][ T4974] RIP: 0033:0x7f563692e969 [ 44.328603][ T4974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.337168][ T4972] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 44.348277][ T4974] RSP: 002b:00007f5634f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.348315][ T4974] RAX: ffffffffffffffda RBX: 00007f5636b55fa0 RCX: 00007f563692e969 [ 44.356842][ T4972] FAT-fs (loop4): Filesystem has been set read-only [ 44.380134][ T4974] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 44.388277][ T4974] RBP: 00007f56369b0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 44.396383][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.404454][ T4974] R13: 0000000000000000 R14: 00007f5636b55fa0 R15: 00007ffde429d6b8 [ 44.412511][ T4974] [ 44.415633][ T4974] ---[ end trace 0000000000000000 ]--- [ 44.421145][ T4974] SELinux: failed to load policy [ 44.467988][ T4979] netlink: 'syz.0.607': attribute type 3 has an invalid length. [ 44.623748][ T4991] SELinux: Context is not valid (left unmapped). [ 44.889246][ T5012] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.968237][ T5024] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 45.006760][ T5028] xt_hashlimit: size too large, truncated to 1048576 [ 45.367603][ T5053] vlan2: entered allmulticast mode [ 45.583897][ T5090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.615070][ T5090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.632384][ T5094] xt_hashlimit: size too large, truncated to 1048576 [ 45.674163][ T5096] loop3: detected capacity change from 0 to 512 [ 45.695015][ T5090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.718413][ T5096] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.735174][ T5096] EXT4-fs (loop3): mount failed [ 45.771438][ T5090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.808347][ T5107] loop3: detected capacity change from 0 to 512 [ 45.815499][ T5107] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.827084][ T5107] EXT4-fs (loop3): 1 truncate cleaned up [ 45.833135][ T5107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.852366][ T5090] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.864141][ T5090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.875930][ T5090] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.888255][ T5090] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.925113][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.946880][ T5115] ipip0: entered promiscuous mode [ 45.948135][ T5114] loop3: detected capacity change from 0 to 1024 [ 45.964451][ T5114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.978006][ T5114] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.012114][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.030023][ T5123] netlink: 'syz.4.668': attribute type 6 has an invalid length. [ 46.072723][ T5129] ipvlan2: entered promiscuous mode [ 46.078113][ T5129] ipvlan2: entered allmulticast mode [ 46.083503][ T5129] hsr0: entered allmulticast mode [ 46.088584][ T5129] hsr_slave_0: entered allmulticast mode [ 46.094295][ T5129] hsr_slave_1: entered allmulticast mode [ 46.206933][ T5141] loop3: detected capacity change from 0 to 512 [ 46.243572][ T5141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.260009][ T5141] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.317575][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.359811][ T5156] SELinux: syz.4.684 (5156) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.584102][ T5198] SELinux: ebitmap: truncated map [ 46.589685][ T5198] SELinux: failed to load policy [ 46.619936][ T5202] netlink: 'syz.4.697': attribute type 10 has an invalid length. [ 46.627795][ T5202] __nla_validate_parse: 2 callbacks suppressed [ 46.627810][ T5202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'. [ 46.676830][ T5202] dummy0: entered promiscuous mode [ 46.706919][ T5202] bridge0: port 3(dummy0) entered blocking state [ 46.713398][ T5202] bridge0: port 3(dummy0) entered disabled state [ 46.720017][ T5202] dummy0: entered allmulticast mode [ 46.727553][ T5202] bridge0: port 3(dummy0) entered blocking state [ 46.733972][ T5202] bridge0: port 3(dummy0) entered forwarding state [ 47.029262][ T5232] usb usb1: usbfs: process 5232 (syz.1.712) did not claim interface 0 before use [ 47.075234][ T5237] loop1: detected capacity change from 0 to 512 [ 47.103588][ T5237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.116350][ T5237] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.159824][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.167456][ T5245] hub 9-0:1.0: USB hub found [ 47.173857][ T5245] hub 9-0:1.0: 8 ports detected [ 47.349021][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 47.526399][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 47.526415][ T29] audit: type=1400 audit(1746354287.161:1189): avc: denied { getopt } for pid=5287 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.609449][ T29] audit: type=1400 audit(1746354287.241:1190): avc: denied { create } for pid=5293 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.667602][ T29] audit: type=1400 audit(1746354287.271:1191): avc: denied { sys_admin } for pid=5293 comm="syz.3.741" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.903541][ T29] audit: type=1400 audit(1746354287.541:1192): avc: denied { name_bind } for pid=5312 comm="syz.4.748" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 47.975783][ T5317] gretap0: entered promiscuous mode [ 47.998581][ T5317] macsec1: entered promiscuous mode [ 48.033679][ T5317] gretap0: left promiscuous mode [ 48.132915][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 48.141866][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 48.159736][ T5338] netlink: 204 bytes leftover after parsing attributes in process `syz.1.759'. [ 48.318728][ T5353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.402363][ T5353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.504486][ T5353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.581983][ T5353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.632831][ T5361] team0: No ports can be present during mode change [ 48.666717][ T5353] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.679236][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 48.709323][ T5361] team0 (unregistering): Port device team_slave_0 removed [ 48.729749][ T5368] futex_wake_op: syz.0.772 tries to shift op by -1; fix this program [ 48.739596][ T5361] team0 (unregistering): Port device team_slave_1 removed [ 48.758516][ T5353] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.778269][ T5372] loop4: detected capacity change from 0 to 128 [ 48.778689][ T5353] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.811798][ T5372] FAT-fs (loop4): Directory bread(block 162) failed [ 48.822562][ T5353] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.822979][ T5372] FAT-fs (loop4): Directory bread(block 163) failed [ 48.862845][ T5372] FAT-fs (loop4): Directory bread(block 164) failed [ 48.878303][ T5372] FAT-fs (loop4): Directory bread(block 165) failed [ 48.900750][ T5372] FAT-fs (loop4): Directory bread(block 166) failed [ 48.922755][ T29] audit: type=1326 audit(1746354288.561:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 48.923921][ T5372] FAT-fs (loop4): Directory bread(block 167) failed [ 48.970740][ T5372] FAT-fs (loop4): Directory bread(block 168) failed [ 48.977455][ T5372] FAT-fs (loop4): Directory bread(block 169) failed [ 49.000756][ T29] audit: type=1326 audit(1746354288.581:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 49.024090][ T29] audit: type=1326 audit(1746354288.581:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 49.041086][ T5372] FAT-fs (loop4): Directory bread(block 162) failed [ 49.047509][ T29] audit: type=1326 audit(1746354288.581:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 49.077554][ T29] audit: type=1326 audit(1746354288.581:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 49.101599][ T29] audit: type=1326 audit(1746354288.581:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fbea0bbe969 code=0x7ffc0000 [ 49.127027][ T5372] FAT-fs (loop4): Directory bread(block 163) failed [ 49.151583][ T5372] syz.4.774: attempt to access beyond end of device [ 49.151583][ T5372] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 49.170881][ T5372] syz.4.774: attempt to access beyond end of device [ 49.170881][ T5372] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 49.250148][ T5389] netlink: 3 bytes leftover after parsing attributes in process `syz.4.783'. [ 49.259681][ T5389] 0X: renamed from caif0 [ 49.268103][ T5389] 0X: entered allmulticast mode [ 49.273475][ T5389] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 49.333294][ T5394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'. [ 49.635877][ T5424] netlink: 'syz.3.799': attribute type 10 has an invalid length. [ 49.666498][ T5424] hsr_slave_0: left promiscuous mode [ 49.686985][ T5424] hsr_slave_1: left promiscuous mode [ 49.779374][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 49.789238][ T5443] IPVS: Error joining to the multicast group [ 49.857790][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 49.880638][ T5458] team0 (unregistering): Port device C removed [ 49.889175][ T5458] team0 (unregistering): Port device team_slave_1 removed [ 50.400637][ T5534] loop3: detected capacity change from 0 to 128 [ 50.669448][ T5562] xt_hashlimit: max too large, truncated to 1048576 [ 50.676925][ T5562] Cannot find set identified by id 0 to match [ 50.729921][ T3378] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.737432][ T3378] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.742005][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.745007][ T3378] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.762492][ T5574] bridge_slave_1 (unregistering): left allmulticast mode [ 50.769664][ T5574] bridge_slave_1 (unregistering): left promiscuous mode [ 50.770073][ T3378] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 50.776841][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.900191][ T5591] pim6reg1: entered promiscuous mode [ 50.905751][ T5591] pim6reg1: entered allmulticast mode [ 51.466690][ T5659] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.579740][ T5684] loop4: detected capacity change from 0 to 128 [ 51.590557][ T5684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.603644][ T3409] nci: nci_rsp_packet: unknown rsp opcode 0x10e [ 51.612362][ T5684] ext4 filesystem being mounted at /216/file supports timestamps until 2038-01-19 (0x7fffffff) [ 51.665938][ T5699] loop3: detected capacity change from 0 to 2049 [ 51.673697][ T5699] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 51.708180][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.724597][ T5704] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 51.878767][ T5723] infiniband syz!: set down [ 51.883379][ T5723] infiniband syz!: added team_slave_0 [ 51.893335][ T5723] RDS/IB: syz!: added [ 51.897490][ T5723] smc: adding ib device syz! with port count 1 [ 51.903754][ T5723] smc: ib device syz! port 1 has pnetid [ 51.916285][ T5731] loop3: detected capacity change from 0 to 512 [ 51.924396][ T5731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.935615][ T5731] EXT4-fs (loop3): 1 truncate cleaned up [ 51.943930][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.993678][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.019476][ T5735] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.378874][ T5756] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 52.412612][ T5761] loop2: detected capacity change from 0 to 1024 [ 52.419565][ T5761] ext4: Unknown parameter 'measure' [ 52.433377][ T5761] loop2: detected capacity change from 0 to 512 [ 52.452194][ T5761] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.954: Failed to acquire dquot type 1 [ 52.464313][ T5761] EXT4-fs (loop2): 1 truncate cleaned up [ 52.470439][ T5761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.483147][ T5761] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.503156][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.516279][ T5767] C: renamed from team_slave_0 (while UP) [ 52.524626][ T5767] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 52.532379][ T5767] __nla_validate_parse: 9 callbacks suppressed [ 52.532395][ T5767] netlink: 152 bytes leftover after parsing attributes in process `syz.3.957'. [ 52.538149][ T5769] loop2: detected capacity change from 0 to 2048 [ 52.539566][ T5767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 52.562131][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.610529][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.628486][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 52.628502][ T29] audit: type=1401 audit(1746354292.261:1370): op=setxattr invalid_context="" [ 52.637364][ T5777] loop2: detected capacity change from 0 to 128 [ 52.703928][ T5779] hub 2-0:1.0: USB hub found [ 52.708611][ T5779] hub 2-0:1.0: 8 ports detected [ 52.745138][ T5783] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 52.745138][ T5783] program syz.2.963 not setting count and/or reply_len properly [ 52.789369][ T5788] IPv6: Can't replace route, no match found [ 52.819111][ T5792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 52.866154][ T29] audit: type=1400 audit(1746354292.501:1371): avc: denied { module_load } for pid=5797 comm="syz.3.970" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 52.982276][ T5805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.973'. [ 52.992711][ T5806] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.037919][ T29] audit: type=1400 audit(1746354292.671:1372): avc: denied { read } for pid=5812 comm="syz.2.978" path="socket:[12428]" dev="sockfs" ino=12428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.066771][ T5815] xt_hashlimit: size too large, truncated to 1048576 [ 53.272900][ T29] audit: type=1400 audit(1746354292.901:1373): avc: denied { setattr } for pid=5833 comm="syz.0.985" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.307592][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 53.432857][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 53.441814][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 53.533721][ T5853] vlan2: entered allmulticast mode [ 53.633851][ T5866] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.656921][ T5868] sd 0:0:1:0: device reset [ 53.700582][ T5871] loop4: detected capacity change from 0 to 164 [ 53.761825][ T29] audit: type=1400 audit(1746354293.401:1374): avc: denied { mount } for pid=5870 comm="syz.4.1001" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 53.797968][ T29] audit: type=1400 audit(1746354293.401:1375): avc: denied { execute } for pid=5870 comm="syz.4.1001" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.819023][ T29] audit: type=1400 audit(1746354293.401:1376): avc: denied { execute_no_trans } for pid=5870 comm="syz.4.1001" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.821249][ T5871] syz.4.1001: attempt to access beyond end of device [ 53.821249][ T5871] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.862786][ T5871] syz.4.1001: attempt to access beyond end of device [ 53.862786][ T5871] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.969404][ T29] audit: type=1400 audit(1746354293.601:1377): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.048926][ T5895] bond1: (slave syz_tun): Releasing active interface [ 54.098614][ T5895] bridge_slave_0: left allmulticast mode [ 54.104445][ T5895] bridge_slave_0: left promiscuous mode [ 54.110194][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.116069][ T5904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1015'. [ 54.142858][ T5895] bond0: (slave bond_slave_0): Releasing backup interface [ 54.153892][ T5895] bond0: (slave bond_slave_1): Releasing backup interface [ 54.168189][ T5895] team0: Port device C removed [ 54.178118][ T5895] team0: Port device team_slave_1 removed [ 54.186296][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.193998][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.204463][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.211962][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.323587][ T29] audit: type=1326 audit(1746354293.961:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877b8fe969 code=0x7ffc0000 [ 54.400748][ T29] audit: type=1326 audit(1746354293.961:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877b8fe969 code=0x7ffc0000 [ 54.648512][ T5962] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 54.682978][ T5965] serio: Serial port ptm0 [ 54.745511][ T5953] loop3: detected capacity change from 0 to 2048 [ 54.794160][ T5975] loop4: detected capacity change from 0 to 2048 [ 54.802599][ T5953] loop3: p2 p3 p7 [ 54.819302][ T5975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.835990][ T5981] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.907141][ T5991] netlink: 'syz.1.1052': attribute type 10 has an invalid length. [ 54.915203][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1052'. [ 54.925584][ T5993] usb usb1: usbfs: process 5993 (syz.2.1061) did not claim interface 0 before use [ 54.949609][ T5991] dummy0: entered promiscuous mode [ 54.955488][ T5991] bridge0: port 3(dummy0) entered blocking state [ 54.961894][ T5991] bridge0: port 3(dummy0) entered disabled state [ 54.968385][ T5991] dummy0: entered allmulticast mode [ 54.988128][ T5991] bridge0: port 3(dummy0) entered blocking state [ 54.994565][ T5991] bridge0: port 3(dummy0) entered forwarding state [ 55.082419][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.124076][ T6016] veth1_to_bond: entered allmulticast mode [ 55.130134][ T6016] veth1_to_bond: entered promiscuous mode [ 55.137533][ T6013] loop3: detected capacity change from 0 to 128 [ 55.161861][ T6016] veth1_to_bond: left promiscuous mode [ 55.167570][ T6016] veth1_to_bond: left allmulticast mode [ 55.402847][ T6035] hub 9-0:1.0: USB hub found [ 55.419632][ T6035] hub 9-0:1.0: 8 ports detected [ 55.434054][ T6038] vhci_hcd: invalid port number 96 [ 55.439234][ T6038] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 55.574764][ T6057] loop4: detected capacity change from 0 to 512 [ 55.594667][ T6061] loop3: detected capacity change from 0 to 512 [ 55.629984][ T6057] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.1082: corrupted in-inode xattr: invalid ea_ino [ 55.644563][ T6057] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1082: couldn't read orphan inode 15 (err -117) [ 55.659297][ T6057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.674389][ T6061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.710227][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.733799][ T6061] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.780519][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.802665][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 55.946093][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'. [ 55.966016][ T6098] loop4: detected capacity change from 0 to 512 [ 55.983961][ T6098] ext4: Unknown parameter 'dont_measure' [ 56.127457][ T6112] cgroup: fork rejected by pids controller in /syz1 [ 56.296684][ T6135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6135 comm=syz.2.1117 [ 56.309269][ T6135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6135 comm=syz.2.1117 [ 56.362454][ T6139] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 56.476716][ T6154] loop3: detected capacity change from 0 to 1024 [ 56.525162][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.537704][ T6154] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.558893][ T6154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 56.586545][ T6154] EXT4-fs (loop3): Remounting filesystem read-only [ 56.625552][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.668066][ T6181] sd 0:0:1:0: device reset [ 56.819038][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 56.829417][ T6212] loop2: detected capacity change from 0 to 512 [ 56.852580][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.870623][ T6212] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.896095][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.903435][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.914309][ T6155] bridge_slave_0: entered allmulticast mode [ 56.920909][ T6155] bridge_slave_0: entered promiscuous mode [ 56.929314][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.936532][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.943858][ T6155] bridge_slave_1: entered allmulticast mode [ 56.944404][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.950324][ T6155] bridge_slave_1: entered promiscuous mode [ 56.959050][ T6224] loop4: detected capacity change from 0 to 1024 [ 56.995891][ T6224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.010127][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.020576][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.033867][ T6224] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1160: Allocating blocks 385-513 which overlap fs metadata [ 57.056463][ T6224] EXT4-fs (loop4): pa ffff888104f200e0: logic 16, phys. 129, len 24 [ 57.064607][ T6224] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 57.100508][ T6155] team0: Port device team_slave_0 added [ 57.111461][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.126228][ T6236] loop2: detected capacity change from 0 to 2048 [ 57.135917][ T6155] team0: Port device team_slave_1 added [ 57.157344][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.164399][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.190404][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.205472][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.212593][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.238790][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.259158][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.284206][ T6251] program syz.3.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.362774][ T6155] hsr_slave_0: entered promiscuous mode [ 57.369076][ T6155] hsr_slave_1: entered promiscuous mode [ 57.427025][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.520255][ T6155] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.572357][ T6155] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.620456][ T6274] loop2: detected capacity change from 0 to 1024 [ 57.627526][ T6274] EXT4-fs: Ignoring removed nobh option [ 57.634075][ T6274] ext2: Unknown parameter 'dont_hash' [ 57.640670][ T6155] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.642308][ T6274] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 57.694349][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 57.694366][ T29] audit: type=1400 audit(1746354297.331:1552): avc: denied { create } for pid=6275 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.739886][ T6155] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.759017][ T29] audit: type=1400 audit(1746354297.331:1553): avc: denied { write } for pid=6275 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.779577][ T29] audit: type=1400 audit(1746354297.331:1554): avc: denied { read } for pid=6275 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.874319][ T6155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.887585][ T29] audit: type=1400 audit(1746354297.521:1555): avc: denied { create } for pid=6282 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.913158][ T6155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.924225][ T6155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.931170][ T29] audit: type=1400 audit(1746354297.561:1556): avc: denied { create } for pid=6285 comm="syz.0.1177" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.955815][ T6155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.963154][ T6287] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 57.973415][ T6287] hsr_slave_0: left promiscuous mode [ 57.989279][ T6287] hsr_slave_1: left promiscuous mode [ 57.996992][ T29] audit: type=1400 audit(1746354297.631:1557): avc: denied { open } for pid=6282 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.007751][ T6286] 9pnet_fd: Insufficient options for proto=fd [ 58.016382][ T29] audit: type=1400 audit(1746354297.631:1558): avc: denied { kernel } for pid=6282 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.059249][ T6289] program syz.0.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.070314][ T6289] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 58.094669][ T29] audit: type=1400 audit(1746354297.641:1559): avc: denied { mounton } for pid=6285 comm="syz.0.1177" path="/247/file0" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.117792][ T29] audit: type=1400 audit(1746354297.681:1560): avc: denied { write } for pid=6282 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.137392][ T29] audit: type=1400 audit(1746354297.681:1561): avc: denied { unlink } for pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.184527][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.208779][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.221482][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.228608][ T4116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.283636][ T6303] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 58.283636][ T6303] program syz.2.1186 not setting count and/or reply_len properly [ 58.303797][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.310981][ T4116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.337957][ T6307] vhci_hcd: invalid port number 15 [ 58.343253][ T6307] vhci_hcd: invalid port number 15 [ 58.357516][ T6309] vlan2: entered allmulticast mode [ 58.362835][ T6309] bridge_slave_0: entered allmulticast mode [ 58.427487][ T6155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.483799][ T6321] loop4: detected capacity change from 0 to 256 [ 58.508733][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.646617][ T6155] veth0_vlan: entered promiscuous mode [ 58.660994][ T6155] veth1_vlan: entered promiscuous mode [ 58.693389][ T6155] veth0_macvtap: entered promiscuous mode [ 58.703327][ T6155] veth1_macvtap: entered promiscuous mode [ 58.716984][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.727548][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.737543][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.748077][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.757984][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.768460][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.778356][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.788871][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.809456][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.822545][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.833075][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.843048][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.853709][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.863561][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.868833][ T6353] loop2: detected capacity change from 0 to 512 [ 58.874012][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.890191][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.900837][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.926217][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.937797][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.952062][ T6155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.961058][ T6155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.969854][ T6155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.978653][ T6155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.989348][ T6353] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.056767][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.059481][ T6360] loop4: detected capacity change from 0 to 512 [ 59.087487][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.138716][ T6360] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.219990][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.401450][ T6380] __nla_validate_parse: 5 callbacks suppressed [ 59.401467][ T6380] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1213'. [ 59.526082][ T6391] No such timeout policy "syz0" [ 59.565608][ T6398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 59.601964][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 59.627666][ T6401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.923252][ T6438] netlink: 'syz.1.1240': attribute type 12 has an invalid length. [ 60.069248][ T6449] ALSA: seq fatal error: cannot create timer (-22) [ 60.202354][ T6473] loop3: detected capacity change from 0 to 1024 [ 60.209175][ T6473] EXT4-fs: Ignoring removed nobh option [ 60.214823][ T6473] EXT4-fs: Ignoring removed bh option [ 60.243914][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.269524][ T6473] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1256: Allocating blocks 385-513 which overlap fs metadata [ 60.288582][ T6473] EXT4-fs (loop3): pa ffff888104f200e0: logic 16, phys. 129, len 24 [ 60.296734][ T6473] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 60.322897][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.345190][ T6490] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.410897][ T6494] pim6reg1: entered promiscuous mode [ 60.416273][ T6494] pim6reg1: entered allmulticast mode [ 60.481519][ T6504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1268'. [ 60.607043][ T6526] atomic_op ffff8881194f4528 conn xmit_atomic 0000000000000000 [ 60.718391][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 61.035965][ T6562] loop4: detected capacity change from 0 to 1024 [ 61.043093][ T6562] EXT4-fs: Ignoring removed bh option [ 61.048547][ T6562] EXT4-fs: inline encryption not supported [ 61.054447][ T6562] EXT4-fs: Ignoring removed i_version option [ 61.062312][ T6562] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.074436][ T6562] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.1293: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.091569][ T6562] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1293: Failed to acquire dquot type 0 [ 61.103138][ T6562] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1293: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.116690][ T6562] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1293: Invalid inode bitmap blk 0 in block_group 0 [ 61.129580][ T4122] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.129672][ T6562] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 61.129741][ T6562] EXT4-fs (loop4): 1 orphan inode deleted [ 61.160916][ T4122] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 61.160989][ T6562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.194441][ T6562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.300063][ T6572] SELinux: ebitmap: truncated map [ 61.309738][ T6572] SELinux: failed to load policy [ 61.339285][ T6578] netlink: 'syz.0.1299': attribute type 21 has an invalid length. [ 61.357317][ T6577] loop4: detected capacity change from 0 to 2049 [ 61.370805][ T6578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1299'. [ 61.388233][ T6577] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 61.511220][ T6584] loop1: detected capacity change from 0 to 8192 [ 61.565626][ T6584] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 61.574255][ T6584] FAT-fs (loop1): Filesystem has been set read-only [ 61.604061][ T6601] C: renamed from team_slave_0 [ 61.610353][ T6601] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 61.618406][ T6601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1311'. [ 61.627519][ T6601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 61.681058][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 61.700605][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 61.769285][ T6621] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.818773][ T6631] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 61.818773][ T6631] program syz.1.1324 not setting count and/or reply_len properly [ 61.906289][ T6642] loop4: detected capacity change from 0 to 1024 [ 61.914554][ T6642] EXT4-fs: Ignoring removed orlov option [ 61.948751][ T6642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.973090][ T6647] Falling back ldisc for ttyS3. [ 62.015591][ T6656] loop3: detected capacity change from 0 to 128 [ 62.078418][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1334'. [ 62.261847][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1345'. [ 62.286217][ T6684] vlan2: entered allmulticast mode [ 62.489479][ T6694] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 62.527349][ T6694] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 62.736432][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 62.736448][ T29] audit: type=1326 audit(1746354302.371:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.792389][ T29] audit: type=1400 audit(1746354302.381:1784): avc: denied { create } for pid=6721 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.812751][ T29] audit: type=1400 audit(1746354302.381:1785): avc: denied { write } for pid=6721 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.832980][ T29] audit: type=1326 audit(1746354302.401:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.856654][ T29] audit: type=1326 audit(1746354302.401:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.880107][ T29] audit: type=1326 audit(1746354302.401:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.903823][ T29] audit: type=1326 audit(1746354302.411:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.927258][ T29] audit: type=1326 audit(1746354302.411:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.950835][ T29] audit: type=1326 audit(1746354302.411:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.974383][ T29] audit: type=1326 audit(1746354302.411:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563692e969 code=0x7ffc0000 [ 62.999533][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.273545][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.283422][ T3381] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.369086][ T6768] loop1: detected capacity change from 0 to 512 [ 63.379489][ T6768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.395870][ T6773] rdma_op ffff88811dbdb180 conn xmit_rdma 0000000000000000 [ 63.401921][ T6768] EXT4-fs (loop1): 1 truncate cleaned up [ 63.409119][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.473429][ T6155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.873790][ T6815] loop1: detected capacity change from 0 to 2048 [ 63.929791][ T6815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.006837][ T6155] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 64.078226][ T6824] loop4: detected capacity change from 0 to 128 [ 64.085725][ T6155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.134352][ T6830] loop1: detected capacity change from 0 to 512 [ 64.144389][ T6829] loop3: detected capacity change from 0 to 2048 [ 64.161127][ T6829] EXT4-fs: inline encryption not supported [ 64.167060][ T6829] EXT4-fs: Ignoring removed oldalloc option [ 64.180153][ T6830] EXT4-fs: Ignoring removed oldalloc option [ 64.191416][ T6830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.214000][ T6830] EXT4-fs (loop1): 1 truncate cleaned up [ 64.231992][ T6839] loop2: detected capacity change from 0 to 512 [ 64.239852][ T6839] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.294696][ T6830] loop1: detected capacity change from 512 to 64 [ 64.303383][ T6839] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 64.334268][ T6155] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -12) [ 64.346315][ T6155] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 64.360767][ T6839] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1414: attempt to clear invalid blocks 2 len 1 [ 64.394583][ T6155] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 64.410123][ T6839] EXT4-fs (loop2): Remounting filesystem read-only [ 64.428968][ T6839] EXT4-fs (loop2): 1 truncate cleaned up [ 64.490646][ T6864] bond1: entered promiscuous mode [ 64.495808][ T6864] bond1: entered allmulticast mode [ 64.501531][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.512473][ T6864] bond1 (unregistering): Released all slaves [ 64.545815][ T6872] rdma_op ffff88811dbdb180 conn xmit_rdma 0000000000000000 [ 64.604093][ T6882] loop4: detected capacity change from 0 to 128 [ 64.646588][ T3409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.696339][ T3409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.755062][ T3409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.813770][ T3409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.904919][ T3409] bridge_slave_1: left allmulticast mode [ 64.910636][ T3409] bridge_slave_1: left promiscuous mode [ 64.916596][ T3409] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.948494][ T3409] bridge_slave_0: left allmulticast mode [ 64.954233][ T3409] bridge_slave_0: left promiscuous mode [ 64.960103][ T3409] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.008318][ T6897] syz.4.1435: attempt to access beyond end of device [ 65.008318][ T6897] loop4: rw=2049, sector=321, nr_sectors = 720 limit=128 [ 65.063827][ T3409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.074007][ T3409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.085141][ T3409] bond0 (unregistering): Released all slaves [ 65.146492][ T6908] loop4: detected capacity change from 0 to 512 [ 65.252571][ T6911] veth1_to_bond: entered allmulticast mode [ 65.258821][ T6911] veth1_to_bond: entered promiscuous mode [ 65.265643][ T6911] veth1_to_bond: left promiscuous mode [ 65.271296][ T6911] veth1_to_bond: left allmulticast mode [ 65.277341][ T6908] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.300431][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 65.383502][ T6908] EXT4-fs (loop4): 1 truncate cleaned up [ 65.389749][ T6908] EXT4-fs mount: 6 callbacks suppressed [ 65.389775][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.435795][ T6908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.465671][ T3409] hsr_slave_0: left promiscuous mode [ 65.482452][ T6919] vhci_hcd: invalid port number 96 [ 65.487624][ T6919] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 65.495121][ T3409] hsr_slave_1: left promiscuous mode [ 65.506807][ T3409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.514336][ T3409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.522366][ T3409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.529887][ T3409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.556264][ T3409] veth1_macvtap: left promiscuous mode [ 65.561971][ T3409] veth0_macvtap: left promiscuous mode [ 65.567590][ T3409] veth1_vlan: left promiscuous mode [ 65.573018][ T3409] veth0_vlan: left promiscuous mode [ 65.647350][ T6929] loop4: detected capacity change from 0 to 512 [ 65.676941][ T6929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.685611][ T6929] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1449: bad orphan inode 13 [ 65.696278][ T6929] ext4_test_bit(bit=12, block=18) = 1 [ 65.701818][ T6929] is_bad_inode(inode)=0 [ 65.706089][ T6929] NEXT_ORPHAN(inode)=2130706432 [ 65.710997][ T6929] max_ino=32 [ 65.714236][ T6929] i_nlink=1 [ 65.718622][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.732542][ T6929] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 65.773303][ T6929] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.782957][ T3409] team0 (unregistering): Port device team_slave_1 removed [ 65.793633][ T3409] team0 (unregistering): Port device team_slave_0 removed [ 65.802973][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.853245][ T6932] syzkaller0: entered allmulticast mode [ 65.871869][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.879090][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.886463][ T6892] bridge_slave_0: entered allmulticast mode [ 65.893183][ T6892] bridge_slave_0: entered promiscuous mode [ 65.928131][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.935760][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.948048][ T6892] bridge_slave_1: entered allmulticast mode [ 65.955009][ T6892] bridge_slave_1: entered promiscuous mode [ 66.012521][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.025613][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.050555][ T6892] team0: Port device team_slave_0 added [ 66.061390][ T6892] team0: Port device team_slave_1 added [ 66.084918][ T6956] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 66.091936][ T6961] loop4: detected capacity change from 0 to 1024 [ 66.092815][ T6956] __nla_validate_parse: 3 callbacks suppressed [ 66.092828][ T6956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1468'. [ 66.116540][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.123665][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.149695][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.173063][ T6961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.190552][ T6961] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.201567][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.208639][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.234859][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.284698][ T6961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.302779][ T6961] EXT4-fs (loop4): Remounting filesystem read-only [ 66.311985][ T6892] hsr_slave_0: entered promiscuous mode [ 66.318260][ T6892] hsr_slave_1: entered promiscuous mode [ 66.349883][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.409596][ T6979] bridge0: entered promiscuous mode [ 66.417271][ T6979] bridge0: port 4(macvlan2) entered blocking state [ 66.423896][ T6979] bridge0: port 4(macvlan2) entered disabled state [ 66.430917][ T6979] macvlan2: entered allmulticast mode [ 66.436947][ T6979] bridge0: entered allmulticast mode [ 66.443685][ T6979] macvlan2: left allmulticast mode [ 66.448898][ T6979] bridge0: left allmulticast mode [ 66.454636][ T6979] bridge0: left promiscuous mode [ 66.492275][ T6892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.530200][ T6892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.546459][ T6892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.559162][ T6892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.584700][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.591871][ T6892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.599202][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.606357][ T6892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.646300][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.663317][ T6992] ref_ctr_offset mismatch. inode: 0x692 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 66.675022][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.683728][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.703514][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.718068][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.725267][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.749412][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.756617][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.771507][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.857032][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.036049][ T7023] loop3: detected capacity change from 0 to 1024 [ 67.048144][ T7023] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1482: Failed to acquire dquot type 0 [ 67.048905][ T6892] veth0_vlan: entered promiscuous mode [ 67.067932][ T6892] veth1_vlan: entered promiscuous mode [ 67.085667][ T7023] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 67.100529][ T7023] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1482: corrupted inode contents [ 67.113411][ T7023] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.1482: mark_inode_dirty error [ 67.125743][ T6892] veth0_macvtap: entered promiscuous mode [ 67.133608][ T6892] veth1_macvtap: entered promiscuous mode [ 67.144609][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.147834][ T7023] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1482: corrupted inode contents [ 67.155104][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.155178][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.187565][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.187849][ T7023] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.1482: mark_inode_dirty error [ 67.197420][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.210161][ T7023] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1482: corrupted inode contents [ 67.219136][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.219150][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.219164][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.261334][ T7023] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 67.262295][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.278129][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.288726][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.298683][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.309164][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.316952][ T7023] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1482: corrupted inode contents [ 67.319007][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.341826][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.345183][ T7023] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.1482: mark_inode_dirty error [ 67.351791][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.373280][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.388105][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.414653][ T7023] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 67.424085][ T7023] EXT4-fs (loop3): 1 truncate cleaned up [ 67.447003][ T7023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.463660][ T6892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.472507][ T6892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.481290][ T6892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.490058][ T6892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.499754][ T7043] random: crng reseeded on system resumption [ 67.553780][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.606777][ T7056] loop5: detected capacity change from 0 to 512 [ 67.632090][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.659045][ T7056] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.699558][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.724523][ T7064] netlink: 'syz.0.1496': attribute type 3 has an invalid length. [ 67.779914][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 67.779932][ T29] audit: type=1326 audit(1746354307.411:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.817933][ T29] audit: type=1326 audit(1746354307.441:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.841594][ T29] audit: type=1326 audit(1746354307.451:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.865142][ T29] audit: type=1326 audit(1746354307.451:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.888671][ T29] audit: type=1326 audit(1746354307.451:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.912369][ T29] audit: type=1326 audit(1746354307.451:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.935853][ T29] audit: type=1326 audit(1746354307.451:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.959712][ T29] audit: type=1326 audit(1746354307.451:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 67.983232][ T29] audit: type=1326 audit(1746354307.451:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 68.006796][ T29] audit: type=1326 audit(1746354307.451:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469d29e969 code=0x7ffc0000 [ 68.081557][ T7083] syz_tun: entered allmulticast mode [ 68.089096][ T7083] syz_tun: left allmulticast mode [ 68.105739][ T7089] vlan2: entered allmulticast mode [ 68.161256][ T7095] : renamed from vlan1 (while UP) [ 68.182583][ T7097] syzkaller1: entered promiscuous mode [ 68.188128][ T7097] syzkaller1: entered allmulticast mode [ 68.276870][ T7097] bridge0: port 3(dummy0) entered disabled state [ 68.283345][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.290672][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.390052][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.415222][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.478988][ T7097] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.488066][ T7097] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.497183][ T7097] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.506242][ T7097] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.553253][ T7124] SELinux: failed to load policy [ 68.593021][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 68.628790][ T7132] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 68.675832][ T7136] bridge0: port 3(vlan1) entered blocking state [ 68.682272][ T7136] bridge0: port 3(vlan1) entered disabled state [ 68.689027][ T7136] vlan1: entered allmulticast mode [ 68.694388][ T7136] bridge0: entered allmulticast mode [ 68.705800][ T7136] vlan1: left allmulticast mode [ 68.710815][ T7136] bridge0: left allmulticast mode [ 68.778043][ T7150] macvtap0: entered promiscuous mode [ 68.789082][ T7150] macvtap0: left promiscuous mode [ 68.926285][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 68.936926][ T7168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.964127][ T7173] loop3: detected capacity change from 0 to 1024 [ 68.977628][ T7173] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.988616][ T7173] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.014694][ T7173] JBD2: no valid journal superblock found [ 69.020507][ T7173] EXT4-fs (loop3): Could not load journal inode [ 69.066653][ T7173] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 69.104560][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 69.165952][ T7197] netlink: 'syz.0.1556': attribute type 12 has an invalid length. [ 69.227420][ T7205] loop2: detected capacity change from 0 to 512 [ 69.250057][ T7205] EXT4-fs: Ignoring removed orlov option [ 69.254071][ T7211] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 69.257742][ T7205] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.1560: corrupted in-inode xattr: invalid ea_ino [ 69.263499][ T7211] netlink: 'syz.3.1563': attribute type 4 has an invalid length. [ 69.263516][ T7211] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1563'. [ 69.279319][ T7205] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1560: couldn't read orphan inode 15 (err -117) [ 69.309899][ T7216] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.323789][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.337211][ T7216] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.409959][ T7222] loop3: detected capacity change from 0 to 512 [ 69.448636][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.460321][ T7222] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.467394][ T7222] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1566: bad orphan inode 13 [ 69.478196][ T7222] ext4_test_bit(bit=12, block=18) = 1 [ 69.484027][ T7222] is_bad_inode(inode)=0 [ 69.488286][ T7222] NEXT_ORPHAN(inode)=2130706432 [ 69.493269][ T7222] max_ino=32 [ 69.496539][ T7222] i_nlink=1 [ 69.508959][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.536022][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.576324][ T7235] netlink: 'syz.3.1573': attribute type 17 has an invalid length. [ 69.584325][ T7235] netlink: 'syz.3.1573': attribute type 41 has an invalid length. [ 69.592293][ T7235] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1573'. [ 69.650084][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.660372][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.769308][ T7262] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1586'. [ 69.792674][ T7264] loop3: detected capacity change from 0 to 512 [ 69.799604][ T7264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.821533][ T7264] EXT4-fs (loop3): 1 truncate cleaned up [ 69.827653][ T7264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.840536][ T7264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.939103][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.952497][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.006674][ T7283] loop3: detected capacity change from 0 to 1024 [ 70.013432][ T7283] EXT4-fs: inline encryption not supported [ 70.019433][ T7283] EXT4-fs: Ignoring removed nobh option [ 70.025200][ T7283] EXT4-fs: Ignoring removed bh option [ 70.044037][ T7283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.207523][ T7299] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 70.313676][ T7290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.357397][ T4122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.437282][ T7327] atomic_op ffff88811dd2ad28 conn xmit_atomic 0000000000000000 [ 70.447323][ T4122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.495321][ T4122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.563338][ T4122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.701186][ T7350] Falling back ldisc for ttyS3. [ 70.802694][ T4122] bond0 (unregistering): Released all slaves [ 70.813268][ T4122] bond1 (unregistering): Released all slaves [ 70.875536][ T7368] hub 2-0:1.0: USB hub found [ 70.888783][ T7368] hub 2-0:1.0: 8 ports detected [ 70.919067][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 70.955340][ T4122] veth1_macvtap: left promiscuous mode [ 70.961038][ T4122] veth0_macvtap: left promiscuous mode [ 70.966562][ T4122] veth1_vlan: left promiscuous mode [ 70.971790][ T4122] veth0_vlan: left promiscuous mode [ 71.090606][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.097968][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.111923][ T7315] bridge_slave_0: entered allmulticast mode [ 71.118549][ T7315] bridge_slave_0: entered promiscuous mode [ 71.126989][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.134535][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.143509][ T7315] bridge_slave_1: entered allmulticast mode [ 71.150052][ T7315] bridge_slave_1: entered promiscuous mode [ 71.169756][ T7400] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.169756][ T7400] program syz.4.1642 not setting count and/or reply_len properly [ 71.170015][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.221445][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 71.233206][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.269870][ T7315] team0: Port device team_slave_0 added [ 71.278100][ T7315] team0: Port device team_slave_1 added [ 71.325056][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.332178][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.358262][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.375688][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.382704][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.408788][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.490806][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 71.523913][ T7315] hsr_slave_0: entered promiscuous mode [ 71.530144][ T7315] hsr_slave_1: entered promiscuous mode [ 71.539170][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.562374][ T7315] Cannot create hsr debugfs directory [ 71.632037][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'. [ 71.634498][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 71.692651][ T7431] loop4: detected capacity change from 0 to 128 [ 71.727587][ T7431] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.735501][ T7431] FAT-fs (loop4): Filesystem has been set read-only [ 71.755092][ T7315] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.762124][ T7431] syz.4.1656: attempt to access beyond end of device [ 71.762124][ T7431] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.778219][ T7315] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.787465][ T7315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.794540][ T7431] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.802435][ T7431] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.812665][ T7315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.827954][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.835177][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.842540][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.849740][ T7315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.857694][ T7431] syz.4.1656: attempt to access beyond end of device [ 71.857694][ T7431] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.872233][ T7431] syz.4.1656: attempt to access beyond end of device [ 71.872233][ T7431] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.897710][ T7431] syz.4.1656: attempt to access beyond end of device [ 71.897710][ T7431] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.914146][ T7442] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.923936][ T7431] syz.4.1656: attempt to access beyond end of device [ 71.923936][ T7431] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.927058][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.949954][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.963014][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.073110][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.084066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.091197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.098353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811935d800: rx timeout, send abort [ 72.099231][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811935d800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.127580][ T7315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.138027][ T7315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.170186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.177343][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.270300][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.331246][ T7472] loop5: detected capacity change from 0 to 1024 [ 72.338283][ T7472] EXT4-fs: Ignoring removed orlov option [ 72.355923][ T7472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.538394][ T7315] veth0_vlan: entered promiscuous mode [ 72.549844][ T7315] veth1_vlan: entered promiscuous mode [ 72.567102][ T7315] veth0_macvtap: entered promiscuous mode [ 72.604409][ T7315] veth1_macvtap: entered promiscuous mode [ 72.614988][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.625714][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.635691][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.646310][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.656247][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.666894][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.676744][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.687202][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.711566][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.722908][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.733458][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.743415][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.753965][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.763907][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.774402][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.784308][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.794817][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.811491][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.821799][ T7315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.830798][ T7315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.839530][ T7315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848288][ T7315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.862016][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 72.862163][ T29] audit: type=1400 audit(1746354312.501:2239): avc: denied { create } for pid=7502 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.888271][ T29] audit: type=1400 audit(1746354312.501:2240): avc: denied { write } for pid=7502 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.906853][ T7505] loop2: detected capacity change from 0 to 128 [ 72.922737][ T29] audit: type=1400 audit(1746354312.561:2241): avc: denied { write } for pid=7506 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.972973][ T29] audit: type=1400 audit(1746354312.571:2242): avc: denied { mounton } for pid=7315 comm="syz-executor" path="/root/syzkaller.vFmT5n/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.997560][ T29] audit: type=1400 audit(1746354312.571:2243): avc: denied { mounton } for pid=7315 comm="syz-executor" path="/root/syzkaller.vFmT5n/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.024507][ T29] audit: type=1400 audit(1746354312.571:2244): avc: denied { mounton } for pid=7315 comm="syz-executor" path="/root/syzkaller.vFmT5n/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.052294][ T29] audit: type=1400 audit(1746354312.581:2245): avc: denied { mounton } for pid=7315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.075439][ T29] audit: type=1400 audit(1746354312.581:2246): avc: denied { mount } for pid=7315 comm="syz-executor" name="/" dev="gadgetfs" ino=3690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.120782][ T7505] loop9: detected capacity change from 0 to 7 [ 73.150804][ T29] audit: type=1400 audit(1746354312.751:2247): avc: denied { append } for pid=7504 comm="syz.2.1686" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.163801][ T7505] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.211088][ T7505] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.219013][ T7505] loop9: unable to read partition table [ 73.269565][ T7505] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 73.269565][ T7505] U) failed (rc=-5) [ 73.288923][ T29] audit: type=1400 audit(1746354312.901:2248): avc: denied { execute } for pid=7515 comm="syz.4.1680" name="file0" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.518641][ T7530] netlink: 'syz.2.1689': attribute type 3 has an invalid length. [ 73.536442][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.846926][ T7562] netlink: 'syz.0.1700': attribute type 3 has an invalid length. [ 73.942487][ T7572] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1707'. [ 74.033435][ T7579] bond1: entered promiscuous mode [ 74.038557][ T7579] bond1: entered allmulticast mode [ 74.044527][ T7579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.069734][ T7579] bond1 (unregistering): Released all slaves [ 74.202343][ T7598] netlink: 'syz.0.1719': attribute type 16 has an invalid length. [ 74.210239][ T7598] netlink: 'syz.0.1719': attribute type 17 has an invalid length. [ 74.243524][ T7601] loop2: detected capacity change from 0 to 2048 [ 74.246257][ T7602] loop6: detected capacity change from 0 to 128 [ 74.257312][ T7601] EXT4-fs: inline encryption not supported [ 74.263279][ T7601] EXT4-fs: Ignoring removed oldalloc option [ 74.269408][ T7598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.314998][ T7601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.353508][ T7608] loop4: detected capacity change from 0 to 128 [ 74.362547][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.378459][ T7608] syz.4.1723: attempt to access beyond end of device [ 74.378459][ T7608] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 74.395934][ T7608] syz.4.1723: attempt to access beyond end of device [ 74.395934][ T7608] loop4: rw=2049, sector=169, nr_sectors = 1 limit=128 [ 74.504405][ T7614] pim6reg: entered allmulticast mode [ 74.530799][ T7614] pim6reg: left allmulticast mode [ 74.616672][ T7616] syz.6.1720: attempt to access beyond end of device [ 74.616672][ T7616] loop6: rw=2049, sector=353, nr_sectors = 688 limit=128 [ 74.844871][ T7651] sd 0:0:1:0: device reset [ 74.856259][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1745'. [ 74.857369][ T7655] 9pnet: p9_errstr2errno: server reported unknown error [ 74.874290][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1745'. [ 74.952900][ T7665] loop5: detected capacity change from 0 to 1024 [ 74.963389][ T7665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.976924][ T7665] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.988625][ T7667] cgroup: fork rejected by pids controller in /syz6 [ 75.006011][ T7665] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 75.042936][ T7665] EXT4-fs (loop5): Remounting filesystem read-only [ 75.098858][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.386761][ T7696] loop2: detected capacity change from 0 to 164 [ 75.400013][ T7696] syz.2.1763: attempt to access beyond end of device [ 75.400013][ T7696] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 75.415896][ T7696] syz.2.1763: attempt to access beyond end of device [ 75.415896][ T7696] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 75.458258][ T7703] loop5: detected capacity change from 0 to 512 [ 75.503482][ T7703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.518938][ T7703] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.638760][ T7711] dummy0: entered promiscuous mode [ 75.644175][ T7711] macsec1: entered allmulticast mode [ 75.649577][ T7711] dummy0: entered allmulticast mode [ 75.659206][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.690237][ T7711] dummy0: left allmulticast mode [ 75.695356][ T7711] dummy0: left promiscuous mode [ 75.953741][ T7753] bridge0: entered promiscuous mode [ 75.960315][ T7753] bridge0: port 3(macvlan2) entered blocking state [ 75.967091][ T7753] bridge0: port 3(macvlan2) entered disabled state [ 75.974627][ T7753] macvlan2: entered allmulticast mode [ 75.980038][ T7753] bridge0: entered allmulticast mode [ 75.986054][ T7753] macvlan2: left allmulticast mode [ 75.991284][ T7753] bridge0: left allmulticast mode [ 75.996846][ T7753] bridge0: left promiscuous mode [ 76.034529][ T7761] unsupported nla_type 52263 [ 76.061737][ T4126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.127166][ T4126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.161134][ T7764] Falling back ldisc for ttyS3. [ 76.225546][ T4126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.251360][ T7782] netlink: 'syz.0.1798': attribute type 10 has an invalid length. [ 76.262629][ T7782] hsr_slave_0: left promiscuous mode [ 76.299026][ T7782] hsr_slave_1: left promiscuous mode [ 76.336508][ T4126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.396633][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 76.464559][ T7773] loop5: detected capacity change from 0 to 164 [ 76.480850][ T4126] bridge_slave_1: left allmulticast mode [ 76.486612][ T4126] bridge_slave_1: left promiscuous mode [ 76.492395][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.519637][ T4126] bridge_slave_0: left allmulticast mode [ 76.525353][ T4126] bridge_slave_0: left promiscuous mode [ 76.531102][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.686080][ T4126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.706031][ T4126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.741881][ T4126] bond0 (unregistering): Released all slaves [ 76.837497][ T7815] loop2: detected capacity change from 0 to 128 [ 76.848796][ T7815] FAT-fs (loop2): Directory bread(block 162) failed [ 76.872539][ T7815] FAT-fs (loop2): Directory bread(block 163) failed [ 76.879489][ T7815] FAT-fs (loop2): Directory bread(block 164) failed [ 76.882434][ T7819] netlink: 'syz.4.1813': attribute type 3 has an invalid length. [ 76.886137][ T7815] FAT-fs (loop2): Directory bread(block 165) failed [ 76.902570][ T7815] FAT-fs (loop2): Directory bread(block 166) failed [ 76.910747][ T7815] FAT-fs (loop2): Directory bread(block 167) failed [ 76.919675][ T7815] FAT-fs (loop2): Directory bread(block 168) failed [ 76.926649][ T7815] FAT-fs (loop2): Directory bread(block 169) failed [ 76.933400][ T4126] hsr_slave_0: left promiscuous mode [ 76.939153][ T4126] hsr_slave_1: left promiscuous mode [ 76.944881][ T4126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.952343][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.959933][ T4126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.967405][ T4126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.978757][ T7815] FAT-fs (loop2): Directory bread(block 162) failed [ 76.986227][ T4126] veth1_macvtap: left promiscuous mode [ 76.991848][ T7815] FAT-fs (loop2): Directory bread(block 163) failed [ 76.998927][ T7815] syz.2.1811: attempt to access beyond end of device [ 76.998927][ T7815] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 77.012274][ T7815] syz.2.1811: attempt to access beyond end of device [ 77.012274][ T7815] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 77.027874][ T4126] veth0_macvtap: left promiscuous mode [ 77.033655][ T4126] veth1_vlan: left promiscuous mode [ 77.038989][ T4126] veth0_vlan: left promiscuous mode [ 77.131515][ T4126] team0 (unregistering): Port device team_slave_1 removed [ 77.143838][ T4126] team0 (unregistering): Port device team_slave_0 removed [ 77.204065][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 77.241473][ T7835] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.241473][ T7835] program syz.0.1817 not setting count and/or reply_len properly [ 77.292368][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.299487][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.316658][ T7767] bridge_slave_0: entered allmulticast mode [ 77.326222][ T7767] bridge_slave_0: entered promiscuous mode [ 77.333392][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.340489][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.348439][ T7767] bridge_slave_1: entered allmulticast mode [ 77.355253][ T7767] bridge_slave_1: entered promiscuous mode [ 77.378243][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.389414][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.422328][ T7767] team0: Port device team_slave_0 added [ 77.429072][ T7767] team0: Port device team_slave_1 added [ 77.483128][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.490273][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.516364][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.535931][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.542989][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.569030][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.607500][ T7767] hsr_slave_0: entered promiscuous mode [ 77.618546][ T7767] hsr_slave_1: entered promiscuous mode [ 77.631124][ T7767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.642916][ T7767] Cannot create hsr debugfs directory [ 77.649167][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 77.665849][ T7859] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1830'. [ 77.692422][ T7859] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1830'. [ 77.709881][ T7869] loop4: detected capacity change from 0 to 512 [ 77.717060][ T7869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.743230][ T7869] EXT4-fs (loop4): 1 truncate cleaned up [ 77.762280][ T7869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.898262][ T7886] bridge0: port 2(vlan2) entered blocking state [ 77.904822][ T7886] bridge0: port 2(vlan2) entered disabled state [ 77.914955][ T7886] vlan2: entered allmulticast mode [ 77.920106][ T7886] bridge0: entered allmulticast mode [ 77.927099][ T7886] vlan2: left allmulticast mode [ 77.932114][ T7886] bridge0: left allmulticast mode [ 77.940241][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.095745][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 78.129610][ T7906] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 78.165012][ T7767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.178200][ T7767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.205097][ T7767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.227931][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 78.228103][ T7767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.263355][ T7914] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.276364][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.283524][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.290908][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.297990][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.313602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.322012][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.384169][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.395175][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.415686][ T7925] loop5: detected capacity change from 0 to 2048 [ 78.424935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.432035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.451428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.454624][ T7925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.458595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.505332][ T7925] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.545352][ T7925] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 78.557798][ T7925] EXT4-fs (loop5): This should not happen!! Data will be lost [ 78.557798][ T7925] [ 78.567673][ T7925] EXT4-fs (loop5): Total free blocks count 0 [ 78.573775][ T7925] EXT4-fs (loop5): Free/Dirty block details [ 78.579749][ T7925] EXT4-fs (loop5): free_blocks=2415919104 [ 78.585695][ T7925] EXT4-fs (loop5): dirty_blocks=16 [ 78.590904][ T7925] EXT4-fs (loop5): Block reservation details [ 78.597361][ T7925] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 78.607571][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.615449][ T7946] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.638536][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 78.638553][ T29] audit: type=1400 audit(1746354318.271:2466): avc: denied { append } for pid=7924 comm="syz.5.1860" path="/64/file1/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.677296][ T29] audit: type=1400 audit(1746354318.271:2467): avc: denied { ioctl } for pid=7924 comm="syz.5.1860" path="/64/file1/cgroup.controllers" dev="loop5" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.705191][ T7952] netlink: 'syz.2.1868': attribute type 12 has an invalid length. [ 78.779607][ T29] audit: type=1400 audit(1746354318.411:2468): avc: denied { bind } for pid=7966 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.799227][ T29] audit: type=1400 audit(1746354318.411:2469): avc: denied { listen } for pid=7966 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.833001][ T29] audit: type=1400 audit(1746354318.461:2470): avc: denied { shutdown } for pid=7966 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.897346][ T7767] veth0_vlan: entered promiscuous mode [ 78.915750][ T7767] veth1_vlan: entered promiscuous mode [ 78.939996][ T29] audit: type=1400 audit(1746354318.571:2471): avc: denied { bind } for pid=7981 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.966681][ T7767] veth0_macvtap: entered promiscuous mode [ 78.974165][ T7767] veth1_macvtap: entered promiscuous mode [ 78.986423][ T7982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.005608][ T29] audit: type=1400 audit(1746354318.611:2472): avc: denied { setopt } for pid=7981 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.007260][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.036942][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.046861][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.057385][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.067232][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.077682][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.087538][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.098037][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.119544][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.129622][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.140172][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.150027][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.160487][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.170501][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.180998][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.190897][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.201391][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.214191][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.226067][ T7982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.238810][ T7989] syz_tun: entered allmulticast mode [ 79.246502][ T7767] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.255313][ T7767] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264115][ T7767] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.272892][ T7767] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.283432][ T7987] syz_tun: left allmulticast mode [ 79.305907][ T7995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 79.312470][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.320236][ T7995] vhci_hcd vhci_hcd.0: Device attached [ 79.331975][ T7982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.349051][ T7995] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 79.355614][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.363862][ T7995] vhci_hcd vhci_hcd.0: Device attached [ 79.371375][ T7996] vhci_hcd: connection closed [ 79.371835][ T4122] vhci_hcd: stop threads [ 79.380892][ T4122] vhci_hcd: release socket [ 79.385352][ T4122] vhci_hcd: disconnect device [ 79.385818][ T8002] vhci_hcd: connection closed [ 79.391868][ T4122] vhci_hcd: stop threads [ 79.400939][ T4122] vhci_hcd: release socket [ 79.405367][ T4122] vhci_hcd: disconnect device [ 79.421945][ T7982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.469389][ T7982] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.488075][ T7982] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.505508][ T7982] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.529730][ T7982] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.712799][ T8057] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 79.727290][ T8057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.741501][ T8054] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.742420][ T8057] bond1: (slave gretap1): making interface the new active one [ 79.749247][ T8054] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 79.758715][ T8057] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 79.826846][ T29] audit: type=1400 audit(1746354319.461:2473): avc: denied { ioctl } for pid=8066 comm="syz.5.1891" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.903031][ T29] audit: type=1326 audit(1746354319.531:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42d36f5927 code=0x7ffc0000 [ 79.926481][ T29] audit: type=1326 audit(1746354319.531:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42d369ab39 code=0x7ffc0000 [ 79.946983][ T8083] loop2: detected capacity change from 0 to 512 [ 80.012741][ T8083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.083915][ T8083] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.185701][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.349447][ T8118] loop5: detected capacity change from 0 to 128 [ 80.557544][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 80.701756][ T8146] binfmt_misc: register: failed to install interpreter file ./file2 [ 80.721880][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'. [ 80.862282][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 81.064546][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'. [ 81.358309][ T8221] bond0: (slave bond_slave_0): Releasing backup interface [ 81.410663][ T8234] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 81.488011][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.522116][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.649394][ T8270] loop6: detected capacity change from 0 to 1024 [ 81.659554][ T8270] EXT4-fs: Ignoring removed bh option [ 81.672287][ T8270] EXT4-fs: inline encryption not supported [ 81.678151][ T8270] EXT4-fs: Ignoring removed i_version option [ 81.685035][ T8270] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.706549][ T8270] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.1975: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.733584][ T8270] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1975: Failed to acquire dquot type 0 [ 81.749428][ T8270] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1975: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.766181][ T8270] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1975: Invalid inode bitmap blk 0 in block_group 0 [ 81.780358][ T8270] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 81.790727][ T31] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.805744][ T8270] EXT4-fs (loop6): 1 orphan inode deleted [ 81.813012][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 81.813796][ T8270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.838051][ T8270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.847989][ T8289] loop2: detected capacity change from 0 to 1024 [ 81.857957][ T8289] EXT4-fs: inline encryption not supported [ 81.864049][ T8289] EXT4-fs: Ignoring removed nobh option [ 81.869708][ T8289] EXT4-fs: Ignoring removed bh option [ 81.916532][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.016948][ T8309] SELinux: ebitmap: truncated map [ 82.024260][ T8309] SELinux: failed to load policy [ 82.085392][ T8323] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.085392][ T8323] program syz.5.2006 not setting count and/or reply_len properly [ 82.128579][ T8329] __nla_validate_parse: 1 callbacks suppressed [ 82.128591][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1999'. [ 82.208343][ T8339] loop5: detected capacity change from 0 to 512 [ 82.211224][ T8325] Falling back ldisc for ttyS3. [ 82.223372][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.251951][ T8339] EXT4-fs warning (device loop5): dx_probe:839: inode #2: comm syz.5.2004: Unimplemented hash flags: 0x0001 [ 82.263639][ T8339] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2004: Corrupt directory, running e2fsck is recommended [ 82.277001][ T8339] EXT4-fs warning (device loop5): dx_probe:839: inode #2: comm syz.5.2004: Unimplemented hash flags: 0x0001 [ 82.288613][ T8339] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2004: Corrupt directory, running e2fsck is recommended [ 82.302537][ T8339] EXT4-fs warning (device loop5): dx_probe:839: inode #2: comm syz.5.2004: Unimplemented hash flags: 0x0001 [ 82.314184][ T8339] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2004: Corrupt directory, running e2fsck is recommended [ 82.328106][ T8339] EXT4-fs warning (device loop5): dx_probe:839: inode #2: comm syz.5.2004: Unimplemented hash flags: 0x0001 [ 82.339828][ T8339] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2004: Corrupt directory, running e2fsck is recommended [ 82.353801][ T8339] EXT4-fs warning (device loop5): dx_probe:839: inode #2: comm syz.5.2004: Unimplemented hash flags: 0x0001 [ 82.365395][ T8339] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2004: Corrupt directory, running e2fsck is recommended [ 82.394543][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.414712][ T8353] pimreg: entered allmulticast mode [ 82.417383][ T8355] netlink: 'syz.5.2011': attribute type 21 has an invalid length. [ 82.422743][ T8353] pimreg: left allmulticast mode [ 82.435705][ T8351] tipc: Started in network mode [ 82.440631][ T8351] tipc: Node identity ac14140f, cluster identity 4711 [ 82.447851][ T8351] tipc: New replicast peer: 255.255.255.255 [ 82.453911][ T8351] tipc: Enabled bearer , priority 10 [ 82.537594][ T8367] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2018'. [ 82.574214][ T8372] loop4: detected capacity change from 0 to 2048 [ 82.576135][ T8374] vlan2: entered allmulticast mode [ 82.631225][ T8372] loop4: p1 < > p4 [ 82.635875][ T8372] loop4: p4 size 8388608 extends beyond EOD, truncated [ 82.646549][ T8372] futex_wake_op: syz.4.2020 tries to shift op by -1; fix this program [ 82.670664][ T8382] loop9: detected capacity change from 0 to 7 [ 82.677350][ T8382] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.686654][ T8382] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.694572][ T8382] loop9: unable to read partition table [ 82.702376][ T8382] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 82.702376][ T8382] U) failed (rc=-5) [ 82.787606][ T8399] loop5: detected capacity change from 0 to 512 [ 82.797054][ T8403] xt_hashlimit: max too large, truncated to 1048576 [ 82.803259][ T8399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.816831][ T8399] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.899844][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.952881][ T8420] loop6: detected capacity change from 0 to 1024 [ 82.959921][ T8420] EXT4-fs: Ignoring removed orlov option [ 82.965717][ T8420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.985175][ T8420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.036220][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 83.065711][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.162466][ T8305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.243666][ T8443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.448549][ T8458] SELinux: failed to load policy [ 83.609511][ T8469] Cannot find add_set index 0 as target [ 83.706251][ T8479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.801655][ T8020] tipc: Node number set to 2886997007 [ 83.813432][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 83.835693][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 83.835708][ T29] audit: type=1400 audit(1746354323.471:2686): avc: denied { write } for pid=8486 comm="syz.6.2066" path="socket:[22547]" dev="sockfs" ino=22547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.910257][ T8495] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 83.927802][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.934989][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.950878][ T8445] bridge_slave_0: entered allmulticast mode [ 83.961260][ T8445] bridge_slave_0: entered promiscuous mode [ 83.974895][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.982132][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.991715][ T8445] bridge_slave_1: entered allmulticast mode [ 83.998179][ T8445] bridge_slave_1: entered promiscuous mode [ 84.008045][ T29] audit: type=1400 audit(1746354323.641:2687): avc: denied { read write } for pid=8500 comm="syz.0.2072" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.033416][ T29] audit: type=1400 audit(1746354323.641:2688): avc: denied { open } for pid=8500 comm="syz.0.2072" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.037835][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 84.069458][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.078836][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.089980][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.117252][ T29] audit: type=1326 audit(1746354323.751:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.141303][ T29] audit: type=1326 audit(1746354323.751:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.166885][ T8445] team0: Port device team_slave_0 added [ 84.170250][ T29] audit: type=1326 audit(1746354323.761:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.196159][ T29] audit: type=1326 audit(1746354323.761:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.197282][ T8445] team0: Port device team_slave_1 added [ 84.219679][ T29] audit: type=1326 audit(1746354323.761:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.248804][ T29] audit: type=1326 audit(1746354323.761:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.272243][ T29] audit: type=1326 audit(1746354323.761:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8507 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d36fe969 code=0x7ffc0000 [ 84.306743][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.313881][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.340028][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.352688][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.359691][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.386088][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.438992][ T8445] hsr_slave_0: entered promiscuous mode [ 84.445185][ T8523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2081'. [ 84.455156][ T8445] hsr_slave_1: entered promiscuous mode [ 84.466801][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.477348][ T8445] Cannot create hsr debugfs directory [ 84.556700][ T8525] ================================================================== [ 84.564841][ T8525] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 84.573473][ T8525] [ 84.575798][ T8525] write to 0xffff8881194c59a8 of 8 bytes by task 8532 on cpu 0: [ 84.583523][ T8525] shmem_file_splice_read+0x444/0x5d0 [ 84.588998][ T8525] splice_direct_to_actor+0x26c/0x680 [ 84.594379][ T8525] do_splice_direct+0xda/0x150 [ 84.599149][ T8525] do_sendfile+0x380/0x640 [ 84.603667][ T8525] __x64_sys_sendfile64+0x105/0x150 [ 84.608885][ T8525] x64_sys_call+0xb39/0x2fb0 [ 84.613493][ T8525] do_syscall_64+0xd0/0x1a0 [ 84.618012][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.623908][ T8525] [ 84.626234][ T8525] write to 0xffff8881194c59a8 of 8 bytes by task 8525 on cpu 1: [ 84.633866][ T8525] shmem_file_splice_read+0x444/0x5d0 [ 84.639249][ T8525] splice_direct_to_actor+0x26c/0x680 [ 84.644624][ T8525] do_splice_direct+0xda/0x150 [ 84.649393][ T8525] do_sendfile+0x380/0x640 [ 84.656660][ T8525] __x64_sys_sendfile64+0x105/0x150 [ 84.662751][ T8525] x64_sys_call+0xb39/0x2fb0 [ 84.667355][ T8525] do_syscall_64+0xd0/0x1a0 [ 84.671867][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.677765][ T8525] [ 84.680088][ T8525] value changed: 0x0000000000001327 -> 0x000000000000132a [ 84.687194][ T8525] [ 84.689515][ T8525] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.695690][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.0.2083 Tainted: G W 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 84.709723][ T8525] Tainted: [W]=WARN [ 84.713537][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.723598][ T8525] ================================================================== [ 84.773701][ T8536] loop5: detected capacity change from 0 to 512 [ 84.781442][ T8536] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.795594][ T8445] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 84.815906][ T8445] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 84.833233][ T8445] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 84.842210][ T8536] EXT4-fs (loop5): 1 truncate cleaned up [ 84.848236][ T8536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.992610][ T7147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.331353][ T8065] bridge_slave_1: left allmulticast mode [ 85.337065][ T8065] bridge_slave_1: left promiscuous mode [ 85.342713][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.350220][ T8065] bridge_slave_0: left allmulticast mode [ 85.355942][ T8065] bridge_slave_0: left promiscuous mode [ 85.361711][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.402780][ T8065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.413394][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.423199][ T8065] bond0 (unregistering): Released all slaves [ 85.506772][ T8065] hsr_slave_0: left promiscuous mode [ 85.512360][ T8065] hsr_slave_1: left promiscuous mode [ 85.518072][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.525989][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.552667][ T8065] team0 (unregistering): Port device team_slave_1 removed [ 85.561768][ T8065] team0 (unregistering): Port device team_slave_0 removed [ 85.854465][ T8065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.913493][ T8065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.962563][ T8065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.023132][ T8065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.073060][ T8065] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.122823][ T8065] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.163261][ T8065] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.232870][ T8065] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.503361][ T8065] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.592802][ T8065] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.652844][ T8065] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.703329][ T8065] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.761810][ T8065] bridge_slave_1: left allmulticast mode [ 86.767540][ T8065] bridge_slave_1: left promiscuous mode [ 86.773372][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.781178][ T8065] bridge_slave_0: left promiscuous mode [ 86.787194][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.795146][ T8065] bridge_slave_1: left allmulticast mode [ 86.800919][ T8065] bridge_slave_1: left promiscuous mode [ 86.806570][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.814142][ T8065] bridge_slave_0: left promiscuous mode [ 86.819807][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.827636][ T8065] dummy0: left allmulticast mode [ 86.832667][ T8065] bridge0: port 3(dummy0) entered disabled state [ 86.839309][ T8065] bridge_slave_1: left allmulticast mode [ 86.844978][ T8065] bridge_slave_1: left promiscuous mode [ 86.850615][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.858577][ T8065] bridge_slave_0: left allmulticast mode [ 86.864310][ T8065] bridge_slave_0: left promiscuous mode [ 86.869983][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.877896][ T8065] bridge_slave_1: left allmulticast mode [ 86.883582][ T8065] bridge_slave_1: left promiscuous mode [ 86.889220][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.896710][ T8065] bridge_slave_0: left allmulticast mode [ 86.902398][ T8065] bridge_slave_0: left promiscuous mode [ 86.908048][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.192411][ T8065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.201781][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.211078][ T8065] bond0 (unregistering): Released all slaves [ 87.219654][ T8065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.229410][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.238671][ T8065] bond0 (unregistering): Released all slaves [ 87.247022][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.256049][ T8065] bond0 (unregistering): Released all slaves [ 87.264317][ T8065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.273979][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.283174][ T8065] bond0 (unregistering): Released all slaves [ 87.303760][ T8065] tipc: Disabling bearer [ 87.308979][ T8065] tipc: Left network mode [ 87.407033][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.415199][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.422605][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.429966][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.439115][ T8065] hsr_slave_0: left promiscuous mode [ 87.444872][ T8065] hsr_slave_1: left promiscuous mode [ 87.450389][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.457851][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.465200][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.472699][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.481458][ T8065] hsr_slave_0: left promiscuous mode [ 87.487082][ T8065] hsr_slave_1: left promiscuous mode [ 87.492723][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.500040][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.509021][ T8065] hsr_slave_0: left promiscuous mode [ 87.514669][ T8065] hsr_slave_1: left promiscuous mode [ 87.520336][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.527853][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.535330][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.542742][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.555834][ T8065] veth1_macvtap: left promiscuous mode [ 87.561395][ T8065] veth0_macvtap: left promiscuous mode [ 87.566891][ T8065] veth1_vlan: left promiscuous mode [ 87.572151][ T8065] veth0_vlan: left promiscuous mode [ 87.577695][ T8065] veth1_macvtap: left promiscuous mode [ 87.583166][ T8065] veth0_macvtap: left promiscuous mode [ 87.588783][ T8065] veth1_vlan: left promiscuous mode [ 87.594257][ T8065] veth0_vlan: left promiscuous mode [ 87.599913][ T8065] veth1_macvtap: left promiscuous mode [ 87.605463][ T8065] veth0_macvtap: left promiscuous mode [ 87.611340][ T8065] veth1_vlan: left promiscuous mode [ 87.616548][ T8065] veth0_vlan: left promiscuous mode [ 87.720417][ T8065] team0 (unregistering): Port device team_slave_1 removed [ 87.729584][ T8065] team0 (unregistering): Port device team_slave_0 removed [ 87.736981][ T8051] smc: removing ib device syz! [ 87.774440][ T8065] team0 (unregistering): Port device team_slave_1 removed [ 87.783666][ T8065] team0 (unregistering): Port device team_slave_0 removed [ 87.861781][ T8065] team0 (unregistering): Port device team_slave_1 removed [ 87.870279][ T8065] team0 (unregistering): Port device team_slave_0 removed