last executing test programs: 27.463358961s ago: executing program 3 (id=146): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540), 0x401, r2, 0x0, 0xa002a0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) rt_sigsuspend(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x2f, 0x0, 0xfffffffffffffe7b}, 0x7}], 0x2, 0x40022123, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") 27.125565852s ago: executing program 3 (id=147): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000d7f0a0000000000001d000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff25, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 27.003402413s ago: executing program 3 (id=148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x27, 0x25, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) 26.924370061s ago: executing program 3 (id=149): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x29}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 26.811717191s ago: executing program 3 (id=152): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) 26.656210775s ago: executing program 3 (id=154): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 18.451216044s ago: executing program 4 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x6}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11.671691204s ago: executing program 0 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11.659764405s ago: executing program 0 (id=326): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x3) close(r2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 5.634661796s ago: executing program 4 (id=347): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x3, 0x9, 0x7, 0x4}) 5.435298563s ago: executing program 4 (id=363): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000100)='io\x00') pread64(r3, &(0x7f0000000180)=""/267, 0x10b, 0x0) 5.402301297s ago: executing program 4 (id=364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x28000000000000, 0x2002) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x5404, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x2004c040) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa1a) 5.297584257s ago: executing program 4 (id=366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x81ff) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.960383717s ago: executing program 4 (id=368): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 4.959788077s ago: executing program 1 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000380)=""/24, 0x18) getdents64(r1, 0xffffffffffffffff, 0x43) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @loopback}, &(0x7f0000000080)=0xc) fstat(r0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017"], 0x54}}, 0x0) 4.92339043s ago: executing program 1 (id=369): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000480), 0xffc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x66) 4.779924044s ago: executing program 1 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8943, &(0x7f0000000080)) 4.754190226s ago: executing program 1 (id=371): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1d, 0x6, 0x4f}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000011c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1000) semget$private(0x0, 0x7, 0x0) 4.736804828s ago: executing program 1 (id=372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.889070735s ago: executing program 1 (id=374): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001040)=[{0x400002, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0x1}], 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000001000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.603072081s ago: executing program 2 (id=375): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 3.435675576s ago: executing program 2 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='overlay\x00', 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000f161008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) 3.304873528s ago: executing program 2 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000080018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) 3.304382928s ago: executing program 2 (id=379): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030035000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x10, 0x2, 0x5, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x48810) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.135076104s ago: executing program 2 (id=380): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) capset(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000005c0)=""/134, 0x86}, {0x0}, {&(0x7f0000000680)=""/160, 0xa0}, {0x0}], 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000fe850000002300000095"], &(0x7f0000001500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.134721184s ago: executing program 2 (id=381): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x6}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 185.267053ms ago: executing program 0 (id=382): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r2 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r2, &(0x7f0000000080), &(0x7f00000001c0)=0xc) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280070002402429000008000540000000000900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 134.266278ms ago: executing program 0 (id=383): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x351, &(0x7f0000001980)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000120028008000700000000000a0001"], 0x48}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8854}, 0x40000) 75.395113ms ago: executing program 0 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x3, 0xfffffffffffffffd, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x80082102, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 0s ago: executing program 0 (id=385): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = eventfd(0x800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r2 = dup(r1) read$eventfd(r2, &(0x7f0000000040), 0x8) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d00), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.540428][ T3547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.568131][ T3547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.577181][ T3547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.584664][ T3268] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.666870][ T3547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.692319][ T3547] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.727178][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.734349][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.819649][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.849990][ T3547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.860482][ T3547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.875848][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.883068][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.242132][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.321918][ T3777] loop0: detected capacity change from 0 to 512 [ 40.438332][ T3777] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.95: corrupted in-inode xattr: invalid ea_ino [ 40.453371][ T3777] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 40.466538][ T3777] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.530768][ T3261] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 40.647283][ T3798] loop0: detected capacity change from 0 to 128 [ 40.735692][ T3547] veth0_vlan: entered promiscuous mode [ 40.761039][ T3547] veth1_vlan: entered promiscuous mode [ 40.778806][ T3547] veth0_macvtap: entered promiscuous mode [ 40.786908][ T3547] veth1_macvtap: entered promiscuous mode [ 40.797597][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.808130][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.818104][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.828660][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.838820][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.849399][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.871935][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.899826][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.910457][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.920320][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.930875][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.940753][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.951238][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.120835][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.133558][ T3547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.142447][ T3547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.151252][ T3547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.160038][ T3547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.453913][ T3848] loop1: detected capacity change from 0 to 2048 [ 41.480731][ T3850] loop0: detected capacity change from 0 to 164 [ 41.497745][ T3848] loop1: p1 < > p3 [ 41.502284][ T3848] loop1: p3 size 134217728 extends beyond EOD, truncated [ 41.523339][ T3852] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 41.587733][ T3861] batman_adv: batadv0: Adding interface: dummy0 [ 41.594046][ T3861] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.666319][ T3861] batman_adv: batadv0: Interface activated: dummy0 [ 41.849992][ T3872] loop3: detected capacity change from 0 to 512 [ 41.878392][ T3872] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.99: corrupted in-inode xattr: invalid ea_ino [ 41.925211][ T3872] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.99: couldn't read orphan inode 15 (err -117) [ 41.964640][ T3878] loop2: detected capacity change from 0 to 512 [ 41.972459][ T3872] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.120919][ T3262] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 42.130905][ T3878] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 42.169261][ T3885] loop1: detected capacity change from 0 to 128 [ 42.175956][ T3878] System zones: 0-2, 18-18, 34-34 [ 42.203067][ T3878] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.112: bg 0: block 248: padding at end of block bitmap is not set [ 42.253442][ T3878] __quota_error: 38 callbacks suppressed [ 42.253461][ T3878] Quota error (device loop2): write_blk: dquota write failed [ 42.266846][ T3878] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 42.316798][ T3888] loop3: detected capacity change from 0 to 2048 [ 42.388225][ T3878] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.112: Failed to acquire dquot type 1 [ 42.403108][ T3878] EXT4-fs (loop2): 1 truncate cleaned up [ 42.412307][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.443796][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.457362][ T3878] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.590310][ T3888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.103: bg 0: block 274: padding at end of block bitmap is not set [ 42.648337][ T3888] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 42.660907][ T3888] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.660907][ T3888] [ 42.679113][ T3268] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /23/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=2164260880, rec_len=231, size=4096 fake=0 [ 42.753451][ T3899] loop0: detected capacity change from 0 to 512 [ 42.762919][ T3899] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 42.771214][ T3899] ref_ctr increment failed for inode: 0xac offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881163ad500 [ 42.783386][ T3899] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 42.791744][ T3899] ref_ctr decrement failed for inode: 0xac offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881163ad500 [ 42.802938][ T3899] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 42.811254][ T3899] ref_ctr decrement failed for inode: 0xac offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881163ad500 [ 42.829240][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.836618][ T3899] uprobe: syz.0.106:3899 failed to unregister, leaking uprobe [ 42.869903][ T3905] sch_fq: defrate 0 ignored. [ 42.935590][ T3909] syzkaller0: entered allmulticast mode [ 42.938387][ T29] audit: type=1400 audit(1726827668.815:319): avc: denied { setopt } for pid=3908 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.962398][ T29] audit: type=1400 audit(1726827668.835:320): avc: denied { bind } for pid=3912 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.989908][ T3895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.001126][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.011817][ T29] audit: type=1400 audit(1726827668.885:321): avc: denied { read write } for pid=3915 comm="syz.4.116" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.035901][ T29] audit: type=1400 audit(1726827668.885:322): avc: denied { open } for pid=3915 comm="syz.4.116" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.059864][ T29] audit: type=1400 audit(1726827668.895:323): avc: denied { ioctl } for pid=3915 comm="syz.4.116" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.091517][ T29] audit: type=1326 audit(1726827668.975:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ffbcdef9 code=0x7ffc0000 [ 43.092555][ T3918] syzkaller0 (unregistering): left allmulticast mode [ 43.114885][ T29] audit: type=1326 audit(1726827668.975:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ffbcdef9 code=0x7ffc0000 [ 43.144942][ T29] audit: type=1326 audit(1726827668.975:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f87ffbcdef9 code=0x7ffc0000 [ 43.251706][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.320738][ T3932] loop3: detected capacity change from 0 to 164 [ 43.321611][ T3930] capability: warning: `syz.0.128' uses deprecated v2 capabilities in a way that may be insecure [ 43.339438][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.352103][ T3930] program syz.0.128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.403501][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.531381][ T3920] chnl_net:caif_netlink_parms(): no params data found [ 43.558535][ T11] bridge_slave_1: left allmulticast mode [ 43.564305][ T11] bridge_slave_1: left promiscuous mode [ 43.570059][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.636723][ T11] bridge_slave_0: left allmulticast mode [ 43.642423][ T11] bridge_slave_0: left promiscuous mode [ 43.648172][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.153674][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.197081][ T3932] bio_check_eod: 31652 callbacks suppressed [ 44.197102][ T3932] syz.3.119: attempt to access beyond end of device [ 44.197102][ T3932] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.310165][ T3932] syz.3.119: attempt to access beyond end of device [ 44.310165][ T3932] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.376412][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.423608][ T3975] loop3: detected capacity change from 0 to 2048 [ 44.431821][ T3975] ext4: Unknown parameter 'fowner<00000000000000060928' [ 44.489328][ T11] bond0 (unregistering): Released all slaves [ 44.560286][ T3981] loop1: detected capacity change from 0 to 512 [ 44.585316][ T3976] loop4: detected capacity change from 0 to 512 [ 44.654187][ T3981] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.670347][ T11] hsr_slave_0: left promiscuous mode [ 44.676225][ T11] hsr_slave_1: left promiscuous mode [ 44.687193][ T3976] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 44.695415][ T3976] ref_ctr increment failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100054a80 [ 44.708276][ T3981] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.736018][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.743525][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.754719][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.762351][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.772125][ T3976] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 44.780525][ T3976] ref_ctr decrement failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100054a80 [ 44.798466][ T11] veth1_macvtap: left promiscuous mode [ 44.804041][ T11] veth0_macvtap: left promiscuous mode [ 44.809644][ T11] veth1_vlan: left promiscuous mode [ 44.814889][ T11] veth0_vlan: left promiscuous mode [ 44.826580][ T3976] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 44.834937][ T3976] ref_ctr decrement failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100054a80 [ 44.852221][ T3976] uprobe: syz.4.125:3976 failed to unregister, leaking uprobe [ 44.991240][ T11] team0 (unregistering): Port device team_slave_1 removed [ 45.001601][ T3940] coredump: 87(+}[@): written to core: VMAs: 29, size 89030656; core: 60138158 bytes, pos 89038848 [ 45.014994][ T11] team0 (unregistering): Port device team_slave_0 removed [ 45.018801][ C0] ------------[ cut here ]------------ [ 45.027616][ C0] refcount_t: underflow; use-after-free. [ 45.033493][ C0] WARNING: CPU: 0 PID: 15 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 45.042770][ C0] Modules linked in: [ 45.046701][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 45.056986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 45.067078][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 45.073294][ C0] Code: 72 ff ff ff e8 1b 65 72 ff 48 c7 c7 a9 fd b2 86 e8 bf cb 8a ff c6 05 11 2a f5 04 01 90 48 c7 c7 b8 34 1b 86 e8 eb 23 54 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 ec 64 72 ff 48 c7 c7 a6 fd b2 86 e8 [ 45.093061][ C0] RSP: 0018:ffffc900000879e8 EFLAGS: 00010246 [ 45.099174][ C0] RAX: 2a23296f99beb100 RBX: ffff888104b452e4 RCX: ffff8881001c8000 [ 45.107216][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.115214][ C0] RBP: 0000000000000003 R08: ffffffff8111f8f7 R09: 0000000000000000 [ 45.123310][ C0] R10: 0001ffffffffffff R11: ffff8881001c8000 R12: 0000000000000001 [ 45.131340][ C0] R13: ffff888115e06800 R14: ffff888104b452e4 R15: 0000000000000000 [ 45.139359][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 45.148359][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.154972][ C0] CR2: 0000001b2fa1eff8 CR3: 0000000006632000 CR4: 00000000003506f0 [ 45.162996][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.171014][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.179030][ C0] Call Trace: [ 45.182341][ C0] [ 45.185289][ C0] ? __warn+0x141/0x350 [ 45.189529][ C0] ? report_bug+0x315/0x420 [ 45.194082][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 45.199695][ C0] ? handle_bug+0x60/0x90 [ 45.204069][ C0] ? exc_invalid_op+0x1a/0x50 [ 45.208875][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 45.213934][ C0] ? __warn_printk+0x167/0x1b0 [ 45.218781][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 45.224363][ C0] ? refcount_warn_saturate+0x1c5/0x230 [ 45.229971][ C0] sk_skb_reason_drop+0xe9/0x290 [ 45.234959][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 45.239866][ C0] j1939_tp_recv+0x699/0xa80 [ 45.244515][ C0] j1939_can_recv+0x45f/0x550 [ 45.249242][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 45.254470][ C0] can_rcv_filter+0x225/0x4c0 [ 45.259239][ C0] can_receive+0x182/0x1f0 [ 45.263677][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 45.268227][ C0] can_rcv+0xe7/0x180 [ 45.272246][ C0] ? __pfx_can_rcv+0x10/0x10 [ 45.276870][ C0] __netif_receive_skb+0x123/0x280 [ 45.282026][ C0] process_backlog+0x22e/0x440 [ 45.286846][ C0] __napi_poll+0x63/0x3c0 [ 45.291241][ C0] ? net_rx_action+0x376/0x7f0 [ 45.296054][ C0] net_rx_action+0x3a1/0x7f0 [ 45.300691][ C0] handle_softirqs+0xbf/0x280 [ 45.305396][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 45.310643][ C0] run_ksoftirqd+0x1c/0x30 [ 45.315120][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 45.320116][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 45.325603][ C0] kthread+0x1d1/0x210 [ 45.329732][ C0] ? __pfx_kthread+0x10/0x10 [ 45.334451][ C0] ret_from_fork+0x4b/0x60 [ 45.338916][ C0] ? __pfx_kthread+0x10/0x10 [ 45.343527][ C0] ret_from_fork_asm+0x1a/0x30 [ 45.348349][ C0] [ 45.351376][ C0] ---[ end trace 0000000000000000 ]--- [ 45.368946][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.376072][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.383478][ T3920] bridge_slave_0: entered allmulticast mode [ 45.402700][ T3920] bridge_slave_0: entered promiscuous mode [ 45.411047][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 45.430031][ T3265] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 45.444189][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.451407][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.458816][ T3920] bridge_slave_1: entered allmulticast mode [ 45.466553][ T3920] bridge_slave_1: entered promiscuous mode [ 45.489995][ T4006] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 45.517175][ T3920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.529341][ T3920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.550832][ T3920] team0: Port device team_slave_0 added [ 45.559447][ T3920] team0: Port device team_slave_1 added [ 45.578411][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.585624][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.611717][ T3920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.623444][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.630598][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.656800][ T3920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.686228][ T3920] hsr_slave_0: entered promiscuous mode [ 45.692472][ T3920] hsr_slave_1: entered promiscuous mode [ 45.698419][ T3920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.706581][ T3920] Cannot create hsr debugfs directory [ 45.784708][ T4028] loop3: detected capacity change from 0 to 128 [ 45.848467][ T4033] usb usb8: usbfs: process 4033 (syz.4.138) did not claim interface 0 before use [ 45.923689][ T4038] loop1: detected capacity change from 0 to 512 [ 45.972985][ T4038] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c018, mo2=0002] [ 45.982884][ T4038] System zones: 0-2, 18-18, 34-34 [ 45.988537][ T4038] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.992555][ T4050] loop3: detected capacity change from 0 to 512 [ 46.004015][ T4038] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.139: Failed to acquire dquot type 1 [ 46.022614][ T4038] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.139: Failed to acquire dquot type 1 [ 46.069736][ T4038] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.139: bg 0: block 248: padding at end of block bitmap is not set [ 46.071871][ T3920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.084502][ T4038] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 46.100866][ T4038] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.139: Failed to acquire dquot type 1 [ 46.112356][ T4038] EXT4-fs (loop1): 1 orphan inode deleted [ 46.119640][ T4050] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 46.127882][ T4050] ref_ctr increment failed for inode: 0xb2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100055f80 [ 46.141047][ T4050] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 46.149423][ T4050] ref_ctr decrement failed for inode: 0xb2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100055f80 [ 46.157247][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.161493][ T4050] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 46.181090][ T4050] ref_ctr decrement failed for inode: 0xb2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100055f80 [ 46.192517][ T4050] uprobe: syz.3.143:4050 failed to unregister, leaking uprobe [ 46.208364][ T3920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.217892][ T3920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.231712][ T3920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.314212][ T3920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.337270][ T3920] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.339366][ T4063] loop3: detected capacity change from 0 to 1024 [ 46.360781][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.367982][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.378640][ T4063] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.397857][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.405057][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.430398][ T4063] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.146: Invalid block bitmap block 0 in block_group 0 [ 46.447265][ T3920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.457785][ T3920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.478919][ T4063] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.146: Failed to acquire dquot type 0 [ 46.508341][ T4063] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.146: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.536413][ T4063] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.146: Invalid inode bitmap blk 0 in block_group 0 [ 46.549470][ T4063] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 46.558668][ T3361] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:7: Failed to release dquot type 0 [ 46.571207][ T4063] EXT4-fs (loop3): 1 orphan inode deleted [ 46.579014][ T4063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.635373][ T3920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.644511][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.825647][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.872429][ T3920] veth0_vlan: entered promiscuous mode [ 46.890017][ T3920] veth1_vlan: entered promiscuous mode [ 46.938409][ T3920] veth0_macvtap: entered promiscuous mode [ 46.958300][ T3920] veth1_macvtap: entered promiscuous mode [ 46.971032][ T4118] loop1: detected capacity change from 0 to 512 [ 46.988344][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.998939][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.008877][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.019335][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.029210][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.039675][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.051272][ T4118] EXT4-fs (loop1): 1 truncate cleaned up [ 47.057520][ T4118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.080182][ T4118] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.153: Directory hole found for htree leaf block 0 [ 47.094867][ T4118] EXT4-fs (loop1): Remounting filesystem read-only [ 47.106675][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.134666][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.152663][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.163259][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.173130][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.183628][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.193480][ T3920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.204109][ T3920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.217209][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.236832][ T3920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.237665][ C1] hrtimer: interrupt took 46235 ns [ 47.245645][ T3920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.259570][ T3920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.268365][ T3920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.353779][ T4136] loop1: detected capacity change from 0 to 512 [ 47.360731][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 47.360748][ T29] audit: type=1400 audit(1726827673.235:631): avc: denied { mount } for pid=3920 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.397715][ T4136] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 47.406036][ T4136] ref_ctr increment failed for inode: 0xd3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114a49500 [ 47.431411][ T4136] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 47.440049][ T4136] ref_ctr decrement failed for inode: 0xd3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114a49500 [ 47.457304][ T4136] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 47.465632][ T4136] ref_ctr decrement failed for inode: 0xd3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114a49500 [ 47.479987][ T4136] uprobe: syz.1.156:4136 failed to unregister, leaking uprobe [ 47.492998][ T4142] loop2: detected capacity change from 0 to 2048 [ 47.529391][ T29] audit: type=1400 audit(1726827673.415:632): avc: denied { create } for pid=4145 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.548803][ T29] audit: type=1400 audit(1726827673.415:633): avc: denied { setopt } for pid=4145 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.570304][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.587140][ T29] audit: type=1400 audit(1726827673.475:634): avc: denied { create } for pid=4141 comm="syz.2.118" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.608591][ T29] audit: type=1400 audit(1726827673.475:635): avc: denied { read write open } for pid=4141 comm="syz.2.118" path="/0/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.631894][ T29] audit: type=1400 audit(1726827673.475:636): avc: denied { mounton } for pid=4141 comm="syz.2.118" path="/0/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.658571][ T29] audit: type=1400 audit(1726827673.545:637): avc: denied { read } for pid=4141 comm="syz.2.118" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 47.685955][ T4142] loop2: detected capacity change from 2048 to 2047 [ 47.707303][ T3920] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /0/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 47.728606][ T29] audit: type=1400 audit(1726827673.615:638): avc: denied { unlink } for pid=3920 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 47.751747][ T3920] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 47.763854][ T3920] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 48.239026][ T29] audit: type=1400 audit(1726827674.125:639): avc: denied { bind } for pid=4155 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.258507][ T29] audit: type=1400 audit(1726827674.125:640): avc: denied { name_bind } for pid=4155 comm="syz.4.163" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 48.310510][ T4159] loop4: detected capacity change from 0 to 1024 [ 48.317243][ T4159] EXT4-fs: Ignoring removed orlov option [ 48.322970][ T4159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.331487][ T4159] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0002] [ 48.339837][ T4159] System zones: 0-1, 3-36 [ 48.345038][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.386272][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.471633][ T4166] loop4: detected capacity change from 0 to 512 [ 48.488589][ T4166] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.496632][ T4166] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 48.505005][ T4166] System zones: 0-1, 15-15, 18-18, 34-34 [ 48.511782][ T4166] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.518420][ T4166] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.533118][ T4166] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 48.541225][ T4166] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.166: bad orphan inode 16 [ 48.551994][ T4166] ext4_test_bit(bit=15, block=18) = 1 [ 48.557442][ T4166] is_bad_inode(inode)=0 [ 48.561621][ T4166] NEXT_ORPHAN(inode)=0 [ 48.565690][ T4166] max_ino=32 [ 48.569053][ T4166] i_nlink=2 [ 48.576363][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.599254][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.621461][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 48.670547][ T4174] loop4: detected capacity change from 0 to 512 [ 48.681825][ T4174] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 48.690224][ T4174] ref_ctr increment failed for inode: 0x78 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881276124c0 [ 48.704684][ T4174] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 48.713087][ T4174] ref_ctr decrement failed for inode: 0x78 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881276124c0 [ 48.724651][ T4174] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 48.732983][ T4174] ref_ctr decrement failed for inode: 0x78 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881276124c0 [ 48.744604][ T4174] uprobe: syz.4.169:4174 failed to unregister, leaking uprobe [ 49.233347][ T4187] loop1: detected capacity change from 0 to 8192 [ 49.253931][ T4187] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 49.262816][ T4187] FAT-fs (loop1): Filesystem has been set read-only [ 49.440844][ T4198] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.448717][ T4198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.538521][ T4202] loop1: detected capacity change from 0 to 512 [ 49.549795][ T4202] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 49.558243][ T4202] ref_ctr increment failed for inode: 0x11f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611a40 [ 49.570417][ T4202] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 49.578807][ T4202] ref_ctr decrement failed for inode: 0x11f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611a40 [ 49.590401][ T4202] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 49.598759][ T4202] ref_ctr decrement failed for inode: 0x11f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611a40 [ 49.610181][ T4202] uprobe: syz.1.181:4202 failed to unregister, leaking uprobe [ 49.737956][ T3920] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.751016][ T89] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.026246][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 50.087891][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.095055][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.102739][ T4214] bridge_slave_0: entered allmulticast mode [ 50.110817][ T4214] bridge_slave_0: entered promiscuous mode [ 50.120350][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.127733][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.136565][ T4214] bridge_slave_1: entered allmulticast mode [ 50.143327][ T4214] bridge_slave_1: entered promiscuous mode [ 50.176890][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.189663][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.218077][ T4214] team0: Port device team_slave_0 added [ 50.225359][ T4214] team0: Port device team_slave_1 added [ 50.252123][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.259187][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.285221][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.296961][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.304000][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.330028][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.356648][ T4214] hsr_slave_0: entered promiscuous mode [ 50.362728][ T4214] hsr_slave_1: entered promiscuous mode [ 50.368717][ T4214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.376411][ T4214] Cannot create hsr debugfs directory [ 50.671278][ T4233] coredump: 66(syz.4.188): coredump has not been created, error -2 [ 50.687285][ T4259] loop1: detected capacity change from 0 to 512 [ 50.705170][ T4259] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.195: iget: bogus i_mode (0) [ 50.716677][ T4259] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.195: couldn't read orphan inode 17 (err -117) [ 50.734689][ T4259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.738319][ T4262] loop4: detected capacity change from 0 to 512 [ 50.753441][ T4259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.195: bg 0: block 7: invalid block bitmap [ 50.805841][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.828541][ T4262] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 50.836846][ T4262] ref_ctr increment failed for inode: 0xa3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611500 [ 50.858120][ T4262] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 50.866527][ T4262] ref_ctr decrement failed for inode: 0xa3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611500 [ 50.878278][ T4262] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 50.886626][ T4262] ref_ctr decrement failed for inode: 0xa3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888127611500 [ 50.898187][ T4262] uprobe: syz.4.193:4262 failed to unregister, leaking uprobe [ 50.899320][ T4266] syz.1.196[4266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.905783][ T4266] syz.1.196[4266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.922423][ T4266] loop1: detected capacity change from 0 to 512 [ 50.948314][ T4266] journal_path: Lookup failure for './file0' [ 50.954386][ T4266] EXT4-fs: error: could not find journal device path [ 51.001895][ T4281] netlink: 104 bytes leftover after parsing attributes in process `syz.1.199'. [ 51.076962][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 51.089394][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 51.133316][ T4299] loop4: detected capacity change from 0 to 1024 [ 51.140985][ T4299] EXT4-fs: Ignoring removed orlov option [ 51.147528][ T4299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.167347][ T4299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 51.175574][ T4299] System zones: 0-1, 3-12 [ 51.178013][ T4302] loop1: detected capacity change from 0 to 128 [ 51.180997][ T4299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.211639][ T4299] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 51.230121][ T89] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.243341][ T4299] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.4.206: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.260336][ T4299] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.206: attempt to clear invalid blocks 1886221359 len 1 [ 51.279632][ T89] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.294852][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.319736][ T4305] loop4: detected capacity change from 0 to 512 [ 51.326836][ T4305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.338907][ T4305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 51.347222][ T4305] System zones: 1-12 [ 51.351405][ T4305] EXT4-fs (loop4): 1 truncate cleaned up [ 51.361061][ T89] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.366225][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.413302][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.472217][ T89] bridge_slave_1: left allmulticast mode [ 51.477997][ T89] bridge_slave_1: left promiscuous mode [ 51.483707][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.496749][ T89] bridge_slave_0: left allmulticast mode [ 51.502447][ T89] bridge_slave_0: left promiscuous mode [ 51.508273][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.688724][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.699306][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.709746][ T89] bond0 (unregistering): Released all slaves [ 51.751227][ T89] hsr_slave_0: left promiscuous mode [ 51.757279][ T89] hsr_slave_1: left promiscuous mode [ 51.763058][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.770589][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.779091][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.786640][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.798158][ T89] veth1_macvtap: left promiscuous mode [ 51.803674][ T89] veth0_macvtap: left promiscuous mode [ 51.809228][ T89] veth1_vlan: left promiscuous mode [ 51.814528][ T89] veth0_vlan: left promiscuous mode [ 51.919514][ T89] team0 (unregistering): Port device team_slave_1 removed [ 51.931049][ T89] team0 (unregistering): Port device team_slave_0 removed [ 51.977909][ T4342] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 52.002118][ T4342] syzkaller0: entered promiscuous mode [ 52.008220][ T4342] syzkaller0: entered allmulticast mode [ 52.139945][ T4357] loop4: detected capacity change from 0 to 2048 [ 52.169250][ T4214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.179896][ T4214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.190392][ T4214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.198263][ T4357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.212978][ T4214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.241475][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.271309][ T4376] loop4: detected capacity change from 0 to 128 [ 52.320467][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.332750][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.342474][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.349608][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.375657][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.382790][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.519880][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.603707][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 52.603749][ T29] audit: type=1400 audit(1726827678.490:869): avc: denied { read } for pid=4375 comm="syz.4.215" path="socket:[7681]" dev="sockfs" ino=7681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.629294][ T4214] veth0_vlan: entered promiscuous mode [ 52.643286][ T4214] veth1_vlan: entered promiscuous mode [ 52.661053][ T4214] veth0_macvtap: entered promiscuous mode [ 52.668975][ T4214] veth1_macvtap: entered promiscuous mode [ 52.679964][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.690521][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.700454][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.710949][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.720792][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.731327][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.743365][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.759171][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.769739][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.779655][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.790161][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.800216][ T4214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.810684][ T4214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.821719][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.832118][ T4214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.840945][ T4214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.849778][ T4214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.858524][ T4214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.940117][ T4410] loop2: detected capacity change from 0 to 512 [ 52.958776][ T4410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.971640][ T4410] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.008059][ T4214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.062514][ T29] audit: type=1326 audit(1726827678.950:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 53.092397][ T4417] loop2: detected capacity change from 0 to 512 [ 53.099718][ T4417] EXT4-fs: Ignoring removed bh option [ 53.112955][ T29] audit: type=1326 audit(1726827678.980:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 53.136447][ T29] audit: type=1326 audit(1726827678.980:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 53.159729][ T29] audit: type=1326 audit(1726827678.980:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb40eadf33 code=0x7ffc0000 [ 53.182920][ T29] audit: type=1326 audit(1726827678.980:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb40eac9df code=0x7ffc0000 [ 53.188823][ T4417] EXT4-fs error (device loop2): __ext4_iget:4982: inode #15: block 1803188595: comm syz.2.219: invalid block [ 53.206008][ T29] audit: type=1326 audit(1726827678.980:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb40eadf87 code=0x7ffc0000 [ 53.218564][ T4417] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.219: couldn't read orphan inode 15 (err -117) [ 53.240698][ T29] audit: type=1326 audit(1726827678.980:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb40eac890 code=0x7ffc0000 [ 53.240746][ T29] audit: type=1326 audit(1726827678.980:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb40eadafb code=0x7ffc0000 [ 53.299067][ T29] audit: type=1326 audit(1726827678.990:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcb40eacb8a code=0x7ffc0000 [ 53.324149][ T4417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.349364][ T4420] bridge0: port 3(bond0) entered blocking state [ 53.355751][ T4420] bridge0: port 3(bond0) entered disabled state [ 53.363464][ T4420] bond0: entered allmulticast mode [ 53.368805][ T4420] bond_slave_0: entered allmulticast mode [ 53.374595][ T4420] bond_slave_1: entered allmulticast mode [ 53.382990][ T4420] bond0: entered promiscuous mode [ 53.388599][ T4420] bond_slave_0: entered promiscuous mode [ 53.394485][ T4420] bond_slave_1: entered promiscuous mode [ 53.401300][ T4420] bridge0: port 3(bond0) entered blocking state [ 53.407645][ T4420] bridge0: port 3(bond0) entered forwarding state [ 53.412219][ T4214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.494172][ T4428] loop4: detected capacity change from 0 to 512 [ 53.501147][ T4428] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.512520][ T4428] EXT4-fs (loop4): 1 truncate cleaned up [ 53.518781][ T4428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.616247][ T4434] loop1: detected capacity change from 0 to 2048 [ 53.656562][ T4434] loop1: p1 < > p3 [ 53.661107][ T4434] loop1: p3 size 134217728 extends beyond EOD, truncated [ 54.187576][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 54.282586][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.320963][ T4452] loop4: detected capacity change from 0 to 1024 [ 54.333913][ T4452] EXT4-fs: Ignoring removed orlov option [ 54.339666][ T4452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.359945][ T4452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.417489][ T4462] syzkaller0: entered promiscuous mode [ 54.423023][ T4462] syzkaller0: entered allmulticast mode [ 54.504644][ T3547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.526189][ T4464] capability: warning: `syz.4.238' uses 32-bit capabilities (legacy support in use) [ 54.569245][ T4469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.893580][ T4483] loop1: detected capacity change from 0 to 2048 [ 54.918737][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.947977][ T4482] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.970661][ T4482] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.982901][ T4482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.982901][ T4482] [ 54.992641][ T4482] EXT4-fs (loop1): Total free blocks count 0 [ 54.998673][ T4482] EXT4-fs (loop1): Free/Dirty block details [ 55.004558][ T4482] EXT4-fs (loop1): free_blocks=2415919104 [ 55.010354][ T4482] EXT4-fs (loop1): dirty_blocks=64 [ 55.015514][ T4482] EXT4-fs (loop1): Block reservation details [ 55.021544][ T4482] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 55.042207][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 26 with max blocks 26 with error 28 [ 55.107758][ T4496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.159263][ T4496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.258073][ T4496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.290684][ T4497] chnl_net:caif_netlink_parms(): no params data found [ 55.303265][ T4496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.328851][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 55.341436][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 55.347995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.355826][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.363663][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.371571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.379436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.387313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.395154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.403018][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.410881][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.418739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.426578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.434421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.442276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.450117][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.457950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.465791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.473643][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.481528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.489397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.497266][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.505082][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.512928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.520762][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.528637][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.536497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.544315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.552142][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.560092][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.567930][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.575766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.583626][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.591527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.599375][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.607244][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.615060][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.622901][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.630761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.638623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.646479][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.654339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.662273][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.670115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.677957][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.685783][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.693641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.701497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.709343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.717231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.725055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.732898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.740732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.748587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.756444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.764279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.772134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.780019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.787851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.795678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.803513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.811363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.819213][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.827089][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.834897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.842743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.850614][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.858460][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.866345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.874157][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.881990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.889883][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.897745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.905595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.913545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.921447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.929298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.937316][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.945115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.953042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.960877][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.968750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.976682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 55.984510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 55.992351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.000214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.008070][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.015940][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.023837][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.031697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.039575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.047461][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.055363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.063213][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.071049][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.078920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.086777][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.094592][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.102419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.110259][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.118107][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.125971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.133871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.141723][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 56.149570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 56.177315][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.184497][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.191935][ T4497] bridge_slave_0: entered allmulticast mode [ 56.198624][ T4497] bridge_slave_0: entered promiscuous mode [ 56.205601][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.212712][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.220034][ T4497] bridge_slave_1: entered allmulticast mode [ 56.226517][ T4497] bridge_slave_1: entered promiscuous mode [ 56.239697][ T4496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.255328][ T4496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.266481][ T4496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.276796][ T4497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.288903][ T4496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.298941][ T4497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.322602][ T4497] team0: Port device team_slave_0 added [ 56.329100][ T4497] team0: Port device team_slave_1 added [ 56.344029][ T4497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.351035][ T4497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.377018][ T4497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.396935][ T4497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.403941][ T4497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.429997][ T4497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.442554][ T4531] Cannot find del_set index 0 as target [ 56.485452][ T4497] hsr_slave_0: entered promiscuous mode [ 56.550665][ T4533] loop2: detected capacity change from 0 to 128 [ 56.569938][ T4497] hsr_slave_1: entered promiscuous mode [ 56.603801][ T4533] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.618705][ T4497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.626717][ T4497] Cannot create hsr debugfs directory [ 56.633428][ T4533] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.804665][ T4214] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.814906][ T4497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.852788][ T4538] loop2: detected capacity change from 0 to 1024 [ 56.859824][ T4538] EXT4-fs: Ignoring removed bh option [ 56.865327][ T4538] EXT4-fs: Ignoring removed oldalloc option [ 56.871794][ T4538] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.891293][ T4497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.910228][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.934163][ T4214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.962909][ T4542] loop2: detected capacity change from 0 to 2048 [ 56.975785][ T4497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.987933][ T4542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.027639][ T4497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.029234][ T4214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.082371][ T4548] loop2: detected capacity change from 0 to 512 [ 57.090163][ T4548] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.099592][ T4548] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.266: iget: bad i_size value: -67835469387268086 [ 57.105594][ T4497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.113878][ T4548] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.266: couldn't read orphan inode 15 (err -117) [ 57.131549][ T4548] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.133111][ T4497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.144848][ T4548] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.163286][ T4497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.202282][ T4548] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 57.218622][ T4497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.237060][ T4214] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 57.328669][ T4563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.270'. [ 57.345988][ T4497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.368592][ T4497] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.385689][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.392803][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.406980][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.414083][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.447548][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.472242][ T4574] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 57.501865][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.558541][ T4575] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 57.604931][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.618841][ T4554] chnl_net:caif_netlink_parms(): no params data found [ 57.666785][ T4497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.678663][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.696845][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.703932][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.713071][ T4554] bridge_slave_0: entered allmulticast mode [ 57.719744][ T4554] bridge_slave_0: entered promiscuous mode [ 57.726754][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.733941][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.743296][ T4554] bridge_slave_1: entered allmulticast mode [ 57.750118][ T4554] bridge_slave_1: entered promiscuous mode [ 57.772281][ T4554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.803085][ T4554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.841886][ T11] bridge_slave_1: left allmulticast mode [ 57.847684][ T11] bridge_slave_1: left promiscuous mode [ 57.853333][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.862789][ T11] bridge_slave_0: left allmulticast mode [ 57.869235][ T11] bridge_slave_0: left promiscuous mode [ 57.874897][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.979567][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.992096][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.003002][ T11] bond0 (unregistering): Released all slaves [ 58.025575][ T4554] team0: Port device team_slave_0 added [ 58.040334][ T4554] team0: Port device team_slave_1 added [ 58.102546][ T4554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.109935][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.135953][ T4554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.155178][ T4554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.162264][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.188200][ T4554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.205926][ T4497] veth0_vlan: entered promiscuous mode [ 58.214964][ T11] hsr_slave_0: left promiscuous mode [ 58.226671][ T11] hsr_slave_1: left promiscuous mode [ 58.241901][ T11] veth1_macvtap: left promiscuous mode [ 58.247436][ T11] veth0_macvtap: left promiscuous mode [ 58.253032][ T11] veth1_vlan: left promiscuous mode [ 58.258439][ T11] veth0_vlan: left promiscuous mode [ 58.360881][ T11] team0 (unregistering): Port device team_slave_1 removed [ 58.371442][ T11] team0 (unregistering): Port device team_slave_0 removed [ 58.413657][ T4497] veth1_vlan: entered promiscuous mode [ 58.478823][ T4554] hsr_slave_0: entered promiscuous mode [ 58.485322][ T4554] hsr_slave_1: entered promiscuous mode [ 58.494577][ T4497] veth0_macvtap: entered promiscuous mode [ 58.518129][ T4497] veth1_macvtap: entered promiscuous mode [ 58.539992][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.550517][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.560374][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.570907][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.580804][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.591391][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.601269][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.611721][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.630103][ T4497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.638415][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.648883][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.658816][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.669339][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.679190][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.689774][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.699621][ T4497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.710160][ T4497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.737354][ T4497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.765352][ T4497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.774202][ T4497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.782984][ T4497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.791759][ T4497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.141491][ T4554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.177516][ T4554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.188628][ T4554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.205914][ T4554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.278977][ T4554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.314713][ T4554] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.325768][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.332891][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.353979][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.361101][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.362833][ T4645] loop0: detected capacity change from 0 to 8192 [ 59.429672][ T4554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.467679][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 59.467702][ T29] audit: type=1326 audit(1726827685.360:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5911b9def9 code=0x7ffc0000 [ 59.497373][ T29] audit: type=1326 audit(1726827685.360:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5911b9def9 code=0x7ffc0000 [ 59.520803][ T29] audit: type=1326 audit(1726827685.360:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5911b9def9 code=0x7ffc0000 [ 59.536171][ T4554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.590054][ T4661] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 59.606041][ T4661] bridge0: port 3(team0) entered blocking state [ 59.612435][ T4661] bridge0: port 3(team0) entered disabled state [ 59.622725][ T4661] team0: entered allmulticast mode [ 59.627915][ T4661] team_slave_0: entered allmulticast mode [ 59.633711][ T4661] team_slave_1: entered allmulticast mode [ 59.656882][ T4661] team0: entered promiscuous mode [ 59.661985][ T4661] team_slave_0: entered promiscuous mode [ 59.667848][ T4661] team_slave_1: entered promiscuous mode [ 59.675322][ T4661] bridge0: port 3(team0) entered blocking state [ 59.681746][ T4661] bridge0: port 3(team0) entered forwarding state [ 59.689427][ T4675] IPv6: Can't replace route, no match found [ 59.698411][ T29] audit: type=1400 audit(1726827685.590:1035): avc: denied { read write } for pid=4674 comm="syz.0.286" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 59.721951][ T29] audit: type=1400 audit(1726827685.590:1036): avc: denied { open } for pid=4674 comm="syz.0.286" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 59.783932][ T4554] veth0_vlan: entered promiscuous mode [ 59.810772][ T4554] veth1_vlan: entered promiscuous mode [ 59.819697][ T4689] loop1: detected capacity change from 0 to 512 [ 59.842205][ T4689] journal_path: Lookup failure for './bus' [ 59.848180][ T4689] EXT4-fs: error: could not find journal device path [ 59.864159][ T4554] veth0_macvtap: entered promiscuous mode [ 59.873738][ T4554] veth1_macvtap: entered promiscuous mode [ 59.906635][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.917206][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.927091][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.937602][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.947499][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.958027][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.968017][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.973554][ T4702] netlink: 52 bytes leftover after parsing attributes in process `syz.0.291'. [ 59.978521][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.987728][ T4702] unsupported nlmsg_type 40 [ 59.997282][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.997300][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.024099][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.025993][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.032779][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.038825][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.049266][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.056613][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.066400][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.073755][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.084201][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091618][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.091647][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.101434][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.101451][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.101465][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.101478][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.101491][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.108905][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.116264][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.116984][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.126753][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.158123][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.167376][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.167407][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.183472][ T29] audit: type=1400 audit(1726827686.010:1037): avc: denied { ioctl } for pid=4699 comm="syz.1.290" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.184710][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.196949][ T4554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.200334][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.207525][ T4554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.214857][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.222291][ T4554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.247072][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.254353][ T4554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.312142][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.319627][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.327102][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.334576][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.342265][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.349745][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.357329][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.364750][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.372194][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.379619][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.387107][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.394523][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.401993][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.409443][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.417057][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.424594][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.432642][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.440428][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.448144][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.460249][ T984] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 60.474055][ T4708] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 60.502486][ T29] audit: type=1326 audit(1726827686.390:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 60.527558][ T29] audit: type=1326 audit(1726827686.390:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 60.551147][ T29] audit: type=1326 audit(1726827686.390:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 60.574498][ T29] audit: type=1326 audit(1726827686.390:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb40eadef9 code=0x7ffc0000 [ 60.848044][ T4721] loop0: detected capacity change from 0 to 128 [ 60.854903][ T4721] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 60.865336][ T4721] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 60.880481][ T4721] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 60.897968][ T4497] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.028509][ T4726] loop1: detected capacity change from 0 to 512 [ 61.051641][ T4726] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 61.059367][ T4724] loop0: detected capacity change from 0 to 128 [ 61.059948][ T4726] EXT4-fs (loop1): 1 truncate cleaned up [ 61.072209][ T4726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.096196][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.204700][ T4740] loop0: detected capacity change from 0 to 128 [ 61.226298][ T4740] syz.0.305: attempt to access beyond end of device [ 61.226298][ T4740] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 61.332703][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.409256][ T4750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.309'. [ 61.418586][ T4750] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 61.430482][ T4750] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.476971][ T4753] rdma_op ffff888115edf980 conn xmit_rdma 0000000000000000 [ 61.485914][ T4755] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 61.497089][ T4755] syzkaller0: entered promiscuous mode [ 61.502659][ T4755] syzkaller0: entered allmulticast mode [ 61.592393][ T4763] loop0: detected capacity change from 0 to 2048 [ 61.627483][ T4763] loop0: p1 < > p4 [ 61.634464][ T4763] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.670065][ T4769] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 61.869497][ T4780] loop1: detected capacity change from 0 to 512 [ 61.910643][ T4780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0102] [ 61.931655][ T4780] System zones: 1-12 [ 61.942057][ T4780] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.322: corrupted in-inode xattr: invalid ea_ino [ 61.974026][ T4780] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.322: couldn't read orphan inode 15 (err -117) [ 61.996414][ T4780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.037937][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.142604][ T4793] loop1: detected capacity change from 0 to 128 [ 62.152171][ T4793] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.166843][ T4793] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.209135][ T3265] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.770584][ T4801] pim6reg1: entered promiscuous mode [ 62.775983][ T4801] pim6reg1: entered allmulticast mode [ 63.918173][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 63.983637][ T4816] loop2: detected capacity change from 0 to 2048 [ 64.012630][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.030796][ T4816] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.192557][ T4823] syzkaller0: entered allmulticast mode [ 64.219190][ T4823] syzkaller0 (unregistering): left allmulticast mode [ 64.520307][ T4826] veth0_vlan: entered allmulticast mode [ 64.558448][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.595765][ T4832] loop2: detected capacity change from 0 to 256 [ 64.608695][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 64.608713][ T29] audit: type=1400 audit(1726827690.500:1117): avc: denied { mounton } for pid=4831 comm="syz.2.341" path="/36/file0/file0" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 64.610604][ T4832] 9pnet_fd: Insufficient options for proto=fd [ 64.704520][ T29] audit: type=1400 audit(1726827690.590:1118): avc: denied { unmount } for pid=4214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.785516][ T89] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.850176][ T89] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.892444][ T4836] loop1: detected capacity change from 0 to 764 [ 64.905222][ T89] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.918287][ T4836] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.960304][ T4846] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.968780][ T29] audit: type=1326 audit(1726827690.860:1119): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4845 comm="syz.1.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813e24def9 code=0x0 [ 65.014782][ T89] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.037747][ T4834] chnl_net:caif_netlink_parms(): no params data found [ 65.072015][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.079163][ T4834] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.086574][ T4834] bridge_slave_0: entered allmulticast mode [ 65.092930][ T4834] bridge_slave_0: entered promiscuous mode [ 65.102189][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.109316][ T4834] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.117661][ T4834] bridge_slave_1: entered allmulticast mode [ 65.124241][ T4834] bridge_slave_1: entered promiscuous mode [ 65.158553][ T89] bridge_slave_1: left allmulticast mode [ 65.164307][ T89] bridge_slave_1: left promiscuous mode [ 65.169965][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.178891][ T89] bridge_slave_0: left allmulticast mode [ 65.184576][ T89] bridge_slave_0: left promiscuous mode [ 65.190308][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.289535][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.299869][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.310495][ T89] bond0 (unregistering): Released all slaves [ 65.319839][ T4834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.332549][ T4834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.353183][ T4834] team0: Port device team_slave_0 added [ 65.360141][ T4834] team0: Port device team_slave_1 added [ 65.369690][ T89] hsr_slave_0: left promiscuous mode [ 65.375379][ T89] hsr_slave_1: left promiscuous mode [ 65.381177][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.388850][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.396891][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.404403][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.413615][ T89] veth1_macvtap: left promiscuous mode [ 65.419145][ T89] veth0_macvtap: left promiscuous mode [ 65.424664][ T89] veth1_vlan: left promiscuous mode [ 65.501540][ T89] team0 (unregistering): Port device team_slave_1 removed [ 65.511827][ T89] team0 (unregistering): Port device team_slave_0 removed [ 65.562339][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.569381][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.595347][ T4834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.607488][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.614440][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.640662][ T4834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.687735][ T4834] hsr_slave_0: entered promiscuous mode [ 65.700209][ T4834] hsr_slave_1: entered promiscuous mode [ 65.708824][ T4834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.717783][ T4834] Cannot create hsr debugfs directory [ 65.925279][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 65.988066][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.995145][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.004202][ T4859] bridge_slave_0: entered allmulticast mode [ 66.012055][ T4859] bridge_slave_0: entered promiscuous mode [ 66.028018][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.035174][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.044374][ T4859] bridge_slave_1: entered allmulticast mode [ 66.051216][ T4859] bridge_slave_1: entered promiscuous mode [ 66.071193][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.082261][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.104285][ T4859] team0: Port device team_slave_0 added [ 66.111122][ T4859] team0: Port device team_slave_1 added [ 66.128035][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.135087][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.161001][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.172562][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.179667][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.205675][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.251644][ T4834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.262600][ T4859] hsr_slave_0: entered promiscuous mode [ 66.268986][ T4859] hsr_slave_1: entered promiscuous mode [ 66.274903][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.283421][ T4859] Cannot create hsr debugfs directory [ 66.289037][ T4834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.298261][ T4834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.312932][ T4834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.424736][ T4834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.442593][ T4859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.468671][ T4834] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.479594][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.486817][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.500454][ T4859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.519826][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.526943][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.561474][ T4859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.619869][ T4859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.632420][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.670042][ T29] audit: type=1326 audit(1726827692.560:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.693032][ T4859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.693546][ T29] audit: type=1326 audit(1726827692.560:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.724841][ T29] audit: type=1326 audit(1726827692.590:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.748447][ T29] audit: type=1326 audit(1726827692.590:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.748683][ T4859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.771854][ T29] audit: type=1326 audit(1726827692.590:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.801909][ T29] audit: type=1326 audit(1726827692.590:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.825273][ T29] audit: type=1326 audit(1726827692.590:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f813e24def9 code=0x7ffc0000 [ 66.850844][ T4859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.862139][ T4859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.878153][ T4941] pim6reg1: entered promiscuous mode [ 66.883477][ T4941] pim6reg1: entered allmulticast mode [ 66.915063][ T4834] veth0_vlan: entered promiscuous mode [ 66.926828][ T4834] veth1_vlan: entered promiscuous mode [ 66.939166][ T4941] loop1: detected capacity change from 0 to 128 [ 66.958541][ T4941] FAT-fs (loop1): bogus logical sector size 12 [ 66.964901][ T4941] FAT-fs (loop1): Can't find a valid FAT filesystem [ 66.972421][ T4834] veth0_macvtap: entered promiscuous mode [ 66.981516][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.995433][ T4834] veth1_macvtap: entered promiscuous mode [ 67.017186][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.027684][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.037540][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.047995][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.058009][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.068691][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.078586][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.089183][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.102610][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.111582][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.121634][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.132147][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.142150][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.152757][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.162684][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.173149][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.183134][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.193582][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.203478][ T4834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.213924][ T4834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.225758][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.234978][ T4834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.243862][ T4834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.252625][ T4834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261378][ T4834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.276949][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.284041][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.294957][ T4950] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.303283][ T4950] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.311654][ T4950] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.320048][ T4950] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.329560][ T4950] geneve2: entered promiscuous mode [ 67.334787][ T4950] geneve2: entered allmulticast mode [ 67.352135][ T1649] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.359285][ T1649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.394684][ T4952] bond_slave_1: mtu less than device minimum [ 67.499812][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.586787][ T4969] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 67.657574][ T4859] veth0_vlan: entered promiscuous mode [ 67.666541][ T4859] veth1_vlan: entered promiscuous mode [ 67.684115][ T4859] veth0_macvtap: entered promiscuous mode [ 67.711542][ T4859] veth1_macvtap: entered promiscuous mode [ 67.723003][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.733548][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.743509][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.754001][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.763885][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.774335][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.784178][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.794759][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.804651][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.815249][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.827078][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.842691][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.853200][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.863156][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.873716][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.883595][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.894114][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.904058][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.914510][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.924429][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.934926][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.944824][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.955379][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967962][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.976849][ T4859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.985641][ T4859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.994440][ T4859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.003272][ T4859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.125800][ T4990] loop4: detected capacity change from 0 to 512 [ 68.172282][ T4990] EXT4-fs mount: 1 callbacks suppressed [ 68.172299][ T4990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.221137][ T4990] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.285728][ T4859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.443293][ T5005] loop4: detected capacity change from 0 to 128 [ 68.468153][ T5007] syz.2.367[5007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.468244][ T5007] syz.2.367[5007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.501852][ T5005] syz.4.366: attempt to access beyond end of device [ 68.501852][ T5005] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 68.543771][ T5005] syz.4.366: attempt to access beyond end of device [ 68.543771][ T5005] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 68.576964][ T5004] syz.4.366: attempt to access beyond end of device [ 68.576964][ T5004] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 68.590254][ T5004] Buffer I/O error on dev loop4, logical block 177, async page read [ 68.605705][ T5004] syz.4.366: attempt to access beyond end of device [ 68.605705][ T5004] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 68.618906][ T5004] Buffer I/O error on dev loop4, logical block 178, async page read [ 68.628757][ T5004] syz.4.366: attempt to access beyond end of device [ 68.628757][ T5004] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 68.641955][ T5004] Buffer I/O error on dev loop4, logical block 179, async page read [ 68.651530][ T5004] syz.4.366: attempt to access beyond end of device [ 68.651530][ T5004] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 68.664698][ T5004] Buffer I/O error on dev loop4, logical block 180, async page read [ 68.675490][ T5004] syz.4.366: attempt to access beyond end of device [ 68.675490][ T5004] loop4: rw=0, sector=181, nr_sectors = 1 limit=128 [ 68.688591][ T5004] Buffer I/O error on dev loop4, logical block 181, async page read [ 68.696976][ T5004] syz.4.366: attempt to access beyond end of device [ 68.696976][ T5004] loop4: rw=0, sector=182, nr_sectors = 1 limit=128 [ 68.710071][ T5004] Buffer I/O error on dev loop4, logical block 182, async page read [ 68.718571][ T5004] syz.4.366: attempt to access beyond end of device [ 68.718571][ T5004] loop4: rw=0, sector=183, nr_sectors = 1 limit=128 [ 68.731735][ T5004] Buffer I/O error on dev loop4, logical block 183, async page read [ 68.740217][ T5004] syz.4.366: attempt to access beyond end of device [ 68.740217][ T5004] loop4: rw=0, sector=184, nr_sectors = 1 limit=128 [ 68.753847][ T5004] Buffer I/O error on dev loop4, logical block 184, async page read [ 68.762187][ T5004] Buffer I/O error on dev loop4, logical block 177, async page read [ 68.770425][ T5004] Buffer I/O error on dev loop4, logical block 178, async page read [ 68.806573][ T5012] netlink: 64 bytes leftover after parsing attributes in process `syz.1.377'. [ 69.863208][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 69.863227][ T29] audit: type=1400 audit(1726827695.750:1181): avc: denied { setopt } for pid=5027 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.876679][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 70.158562][ T5030] loop2: detected capacity change from 0 to 512 [ 70.177650][ T5030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.192561][ T5030] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.231822][ T5030] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #19: comm syz.2.375: corrupted inode contents [ 70.243884][ T5030] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #19: comm syz.2.375: mark_inode_dirty error [ 70.255386][ T5030] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #19: comm syz.2.375: corrupted inode contents [ 70.267548][ T5030] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3007: inode #19: comm syz.2.375: mark_inode_dirty error [ 70.280373][ T5030] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3010: inode #19: comm syz.2.375: mark inode dirty (error -117) [ 70.293025][ T5030] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 70.313053][ T4834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.468861][ T5039] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.379'. [ 70.478199][ T5039] openvswitch: netlink: Flow key attr not present in new flow. [ 70.572765][ T5042] Driver unsupported XDP return value 0 on prog (id 321) dev N/A, expect packet loss! [ 70.603678][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 72.325152][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 72.360372][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.367542][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.375360][ T5048] bridge_slave_0: entered allmulticast mode [ 72.381908][ T5048] bridge_slave_0: entered promiscuous mode [ 72.388749][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.395793][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.403070][ T5048] bridge_slave_1: entered allmulticast mode [ 72.409669][ T5048] bridge_slave_1: entered promiscuous mode [ 72.427408][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.438108][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.457922][ T5048] team0: Port device team_slave_0 added [ 72.464525][ T5048] team0: Port device team_slave_1 added [ 72.480907][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.487907][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.514181][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.525737][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.532734][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.558672][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.584172][ T5048] hsr_slave_0: entered promiscuous mode [ 72.591687][ T5048] hsr_slave_1: entered promiscuous mode [ 72.597861][ T5048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.605412][ T5048] Cannot create hsr debugfs directory [ 72.657463][ T5048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.708748][ T5048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.758964][ T5048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.799564][ T5048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.860616][ T5048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.869251][ T5048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.877958][ T5048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.887487][ T5048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.902237][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.909383][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.916754][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.923974][ T5048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.956951][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.968903][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976976][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.991615][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.003333][ T1649] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.010466][ T1649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.022828][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.030040][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.097441][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.165470][ T5048] veth0_vlan: entered promiscuous mode [ 73.174344][ T5048] veth1_vlan: entered promiscuous mode [ 73.191017][ T5048] veth0_macvtap: entered promiscuous mode [ 73.199059][ T5048] veth1_macvtap: entered promiscuous mode [ 73.210569][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.221073][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.231663][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.242400][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.252310][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.262778][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.272619][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.283129][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.293040][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.303569][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.313697][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.324342][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.336353][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.347706][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.358356][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.368232][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.378931][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.389115][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.399569][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.409435][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.419885][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.429801][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.440431][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.450346][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.460862][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.470972][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.481452][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.492420][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.503336][ T5048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512109][ T5048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.520880][ T5048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.529640][ T5048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.623687][ T5078] loop0: detected capacity change from 0 to 256 [ 73.643569][ T5078] FAT-fs (loop0): codepage cp1255 not found [ 73.651416][ T5078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 74.495126][ T5083] +}[@ invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 74.509135][ T5083] CPU: 0 UID: 0 PID: 5083 Comm: +}[@ Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 74.520538][ T5083] Tainted: [W]=WARN [ 74.524345][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.534411][ T5083] Call Trace: [ 74.537700][ T5083] [ 74.540697][ T5083] dump_stack_lvl+0xf2/0x150 [ 74.545424][ T5083] dump_stack+0x15/0x20 [ 74.549606][ T5083] dump_header+0x83/0x2d0 [ 74.553954][ T5083] oom_kill_process+0x341/0x4c0 [ 74.558868][ T5083] out_of_memory+0x9af/0xbe0 [ 74.563492][ T5083] ? __rcu_read_unlock+0x4e/0x70 [ 74.568501][ T5083] mem_cgroup_out_of_memory+0x13e/0x190 [ 74.574137][ T5083] try_charge_memcg+0x51b/0x810 [ 74.579009][ T5083] obj_cgroup_charge_pages+0xbd/0x1a0 [ 74.584435][ T5083] __memcg_kmem_charge_page+0x9d/0x170 [ 74.589939][ T5083] __alloc_pages_noprof+0x1bc/0x360 [ 74.595235][ T5083] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 74.600730][ T5083] alloc_pages_noprof+0xe1/0x100 [ 74.605681][ T5083] __vmalloc_node_range_noprof+0x736/0xec0 [ 74.611621][ T5083] __kvmalloc_node_noprof+0x121/0x170 [ 74.617139][ T5083] ? ip_set_alloc+0x1f/0x30 [ 74.621667][ T5083] ip_set_alloc+0x1f/0x30 [ 74.626005][ T5083] hash_netiface_create+0x273/0x730 [ 74.631227][ T5083] ? __nla_parse+0x40/0x60 [ 74.635748][ T5083] ? __pfx_hash_netiface_create+0x10/0x10 [ 74.641500][ T5083] ip_set_create+0x359/0x8a0 [ 74.646139][ T5083] ? strnstr+0xf1/0x100 [ 74.650324][ T5083] ? __nla_parse+0x40/0x60 [ 74.654835][ T5083] nfnetlink_rcv_msg+0x4a9/0x570 [ 74.659827][ T5083] netlink_rcv_skb+0x12c/0x230 [ 74.664737][ T5083] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 74.670266][ T5083] nfnetlink_rcv+0x16c/0x15c0 [ 74.674991][ T5083] ? kmem_cache_free+0xdd/0x2d0 [ 74.679948][ T5083] ? nlmon_xmit+0x51/0x60 [ 74.684297][ T5083] ? __kfree_skb+0x102/0x150 [ 74.688923][ T5083] ? consume_skb+0x49/0x160 [ 74.693471][ T5083] ? nlmon_xmit+0x51/0x60 [ 74.697855][ T5083] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 74.703249][ T5083] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 74.708401][ T5083] ? ref_tracker_free+0x3a5/0x410 [ 74.713445][ T5083] ? __dev_queue_xmit+0x161/0x1fe0 [ 74.718587][ T5083] ? __netlink_deliver_tap+0x495/0x4c0 [ 74.724091][ T5083] netlink_unicast+0x599/0x670 [ 74.728874][ T5083] netlink_sendmsg+0x5cc/0x6e0 [ 74.733814][ T5083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.739255][ T5083] __sock_sendmsg+0x140/0x180 [ 74.743948][ T5083] ____sys_sendmsg+0x312/0x410 [ 74.748736][ T5083] __sys_sendmsg+0x1dd/0x270 [ 74.753386][ T5083] ? futex_wait+0x18e/0x1c0 [ 74.757913][ T5083] __x64_sys_sendmsg+0x46/0x50 [ 74.762699][ T5083] x64_sys_call+0x2689/0x2d60 [ 74.767422][ T5083] do_syscall_64+0xc9/0x1c0 [ 74.772035][ T5083] ? clear_bhb_loop+0x55/0xb0 [ 74.776807][ T5083] ? clear_bhb_loop+0x55/0xb0 [ 74.781593][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.787525][ T5083] RIP: 0033:0x7fcd167edef9 [ 74.791998][ T5083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.811690][ T5083] RSP: 002b:00007fcd15467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.820192][ T5083] RAX: ffffffffffffffda RBX: 00007fcd169a5f80 RCX: 00007fcd167edef9 [ 74.828170][ T5083] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 74.836213][ T5083] RBP: 00007fcd16860b76 R08: 0000000000000000 R09: 0000000000000000 [ 74.844188][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.852195][ T5083] R13: 0000000000000000 R14: 00007fcd169a5f80 R15: 00007ffd22704638 [ 74.860219][ T5083] [ 74.863435][ T5083] memory: usage 307200kB, limit 307200kB, failcnt 192 [ 74.870357][ T5083] memory+swap: usage 307732kB, limit 9007199254740988kB, failcnt 0 [ 74.878395][ T5083] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 74.885687][ T5083] Memory cgroup stats for /syz0: [ 74.885813][ T5083] cache 98304 [ 74.894069][ T5083] rss 4096 [ 74.897301][ T5083] shmem 0 [ 74.900247][ T5083] mapped_file 98304 [ 74.904061][ T5083] dirty 98304 [ 74.907384][ T5083] writeback 0 [ 74.910728][ T5083] workingset_refault_anon 11 [ 74.915350][ T5083] workingset_refault_file 32 [ 74.920062][ T5083] swap 544768 [ 74.923412][ T5083] swapcached 24576 [ 74.927162][ T5083] pgpgin 59781 [ 74.930550][ T5083] pgpgout 59751 [ 74.934032][ T5083] pgfault 28344 [ 74.937511][ T5083] pgmajfault 8 [ 74.940957][ T5083] inactive_anon 0 [ 74.944588][ T5083] active_anon 24576 [ 74.948437][ T5083] inactive_file 0 [ 74.952084][ T5083] active_file 98304 [ 74.955933][ T5083] unevictable 0 [ 74.959488][ T5083] hierarchical_memory_limit 314572800 [ 74.964937][ T5083] hierarchical_memsw_limit 9223372036854771712 [ 74.971123][ T5083] total_cache 98304 [ 74.974937][ T5083] total_rss 4096 [ 74.978531][ T5083] total_shmem 0 [ 74.982065][ T5083] total_mapped_file 98304 [ 74.986426][ T5083] total_dirty 98304 [ 74.990321][ T5083] total_writeback 0 [ 74.994131][ T5083] total_workingset_refault_anon 11 [ 74.999274][ T5083] total_workingset_refault_file 32 [ 75.004520][ T5083] total_swap 544768 [ 75.008367][ T5083] total_swapcached 24576 [ 75.012658][ T5083] total_pgpgin 59781 [ 75.016572][ T5083] total_pgpgout 59751 [ 75.020595][ T5083] total_pgfault 28344 [ 75.024566][ T5083] total_pgmajfault 8 [ 75.028586][ T5083] total_inactive_anon 0 [ 75.032925][ T5083] total_active_anon 24576 [ 75.037277][ T5083] total_inactive_file 0 [ 75.041516][ T5083] total_active_file 98304 [ 75.045913][ T5083] total_unevictable 0 [ 75.049899][ T5083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.326,pid=4790,uid=0 [ 75.064455][ T5083] Memory cgroup out of memory: Killed process 4795 (syz.0.326) total-vm:87116kB, anon-rss:592kB, file-rss:16324kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 75.164683][ T5048] ================================================================== [ 75.172828][ T5048] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 75.180251][ T5048] [ 75.182584][ T5048] read to 0xffff888115aade68 of 4 bytes by task 5083 on cpu 0: [ 75.190144][ T5048] mem_cgroup_iter+0x93/0x380 [ 75.194848][ T5048] shrink_node+0x74a/0x1d40 [ 75.199368][ T5048] do_try_to_free_pages+0x3c6/0xc50 [ 75.204605][ T5048] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 75.210536][ T5048] try_charge_memcg+0x2bc/0x810 [ 75.215412][ T5048] obj_cgroup_charge_pages+0xbd/0x1a0 [ 75.220801][ T5048] __memcg_kmem_charge_page+0x9d/0x170 [ 75.226274][ T5048] __alloc_pages_noprof+0x1bc/0x360 [ 75.231505][ T5048] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 75.236907][ T5048] alloc_pages_noprof+0xe1/0x100 [ 75.241871][ T5048] __vmalloc_node_range_noprof+0x736/0xec0 [ 75.247696][ T5048] __kvmalloc_node_noprof+0x121/0x170 [ 75.253082][ T5048] ip_set_alloc+0x1f/0x30 [ 75.257426][ T5048] hash_netiface_create+0x273/0x730 [ 75.262645][ T5048] ip_set_create+0x359/0x8a0 [ 75.267269][ T5048] nfnetlink_rcv_msg+0x4a9/0x570 [ 75.272245][ T5048] netlink_rcv_skb+0x12c/0x230 [ 75.277047][ T5048] nfnetlink_rcv+0x16c/0x15c0 [ 75.281768][ T5048] netlink_unicast+0x599/0x670 [ 75.286581][ T5048] netlink_sendmsg+0x5cc/0x6e0 [ 75.291377][ T5048] __sock_sendmsg+0x140/0x180 [ 75.296068][ T5048] ____sys_sendmsg+0x312/0x410 [ 75.300868][ T5048] __sys_sendmsg+0x1dd/0x270 [ 75.305487][ T5048] __x64_sys_sendmsg+0x46/0x50 [ 75.310311][ T5048] x64_sys_call+0x2689/0x2d60 [ 75.315009][ T5048] do_syscall_64+0xc9/0x1c0 [ 75.319543][ T5048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.325561][ T5048] [ 75.327898][ T5048] read-write to 0xffff888115aade68 of 4 bytes by task 5048 on cpu 1: [ 75.336064][ T5048] mem_cgroup_iter+0x28e/0x380 [ 75.340858][ T5048] shrink_node+0x74a/0x1d40 [ 75.345381][ T5048] do_try_to_free_pages+0x3c6/0xc50 [ 75.350601][ T5048] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 75.356545][ T5048] try_charge_memcg+0x2bc/0x810 [ 75.361431][ T5048] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 75.367521][ T5048] __read_swap_cache_async+0x2b7/0x520 [ 75.373017][ T5048] swap_cluster_readahead+0x276/0x3f0 [ 75.378416][ T5048] swapin_readahead+0xe4/0x760 [ 75.383199][ T5048] do_swap_page+0x3da/0x1ef0 [ 75.387810][ T5048] handle_mm_fault+0x8c5/0x2a40 [ 75.392689][ T5048] exc_page_fault+0x3b9/0x650 [ 75.395918][ T29] audit: type=1400 audit(1726827701.280:1182): avc: denied { write } for pid=3251 comm="syz-executor" path="pipe:[1802]" dev="pipefs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 75.397375][ T5048] asm_exc_page_fault+0x26/0x30 [ 75.425331][ T5048] [ 75.427661][ T5048] value changed: 0x0000080f -> 0x00000810 [ 75.433395][ T5048] [ 75.435724][ T5048] Reported by Kernel Concurrency Sanitizer on: [ 75.441883][ T5048] CPU: 1 UID: 0 PID: 5048 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 75.453888][ T5048] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.457708][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.467784][ T5048] ================================================================== [ 75.706562][ T89] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.759691][ T89] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.829937][ T89] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.893624][ T89] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.005698][ T89] bridge_slave_1: left allmulticast mode [ 76.011443][ T89] bridge_slave_1: left promiscuous mode [ 76.017137][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.025146][ T89] bridge_slave_0: left allmulticast mode [ 76.030901][ T89] bridge_slave_0: left promiscuous mode [ 76.036556][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.138530][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.149815][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.160246][ T89] bond0 (unregistering): Released all slaves [ 76.214321][ T89] hsr_slave_0: left promiscuous mode [ 76.220277][ T89] hsr_slave_1: left promiscuous mode [ 76.227734][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.235219][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.243237][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.250901][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.262442][ T89] veth1_macvtap: left promiscuous mode [ 76.268013][ T89] veth0_macvtap: left promiscuous mode [ 76.273680][ T89] veth1_vlan: left promiscuous mode [ 76.279137][ T89] veth0_vlan: left promiscuous mode [ 76.370990][ T89] team0 (unregistering): Port device team_slave_1 removed [ 76.382174][ T89] team0 (unregistering): Port device team_slave_0 removed [ 76.820796][ T89] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.889022][ T89] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.969367][ T89] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.028738][ T89] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.102500][ T89] bridge_slave_1: left allmulticast mode [ 77.108252][ T89] bridge_slave_1: left promiscuous mode [ 77.113959][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.126483][ T89] bridge_slave_0: left allmulticast mode [ 77.132186][ T89] bridge_slave_0: left promiscuous mode [ 77.137911][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.147671][ T30] oom_reaper: reaped process 4795 (syz.0.326), now anon-rss:20kB, file-rss:15304kB, shmem-rss:0kB [ 77.278256][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.288582][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.299153][ T89] bond0 (unregistering): Released all slaves [ 77.339453][ T89] hsr_slave_0: left promiscuous mode [ 77.345292][ T89] hsr_slave_1: left promiscuous mode [ 77.351657][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.359225][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.367930][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.375368][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.385225][ T89] veth1_macvtap: left promiscuous mode [ 77.390806][ T89] veth0_macvtap: left promiscuous mode [ 77.396353][ T89] veth1_vlan: left promiscuous mode [ 77.401646][ T89] veth0_vlan: left promiscuous mode [ 77.496670][ T89] team0 (unregistering): Port device team_slave_1 removed [ 77.507664][ T89] team0 (unregistering): Port device team_slave_0 removed [ 77.989282][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.039588][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.119830][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.169129][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.255894][ T56] bridge_slave_1: left allmulticast mode [ 78.261609][ T56] bridge_slave_1: left promiscuous mode [ 78.267346][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.275175][ T56] bridge_slave_0: left allmulticast mode [ 78.280980][ T56] bridge_slave_0: left promiscuous mode [ 78.286737][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.368879][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.379978][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.390286][ T56] bond0 (unregistering): Released all slaves [ 78.447463][ T56] hsr_slave_0: left promiscuous mode [ 78.453259][ T56] hsr_slave_1: left promiscuous mode [ 78.459421][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.466926][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.476023][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.483463][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.493108][ T56] veth1_macvtap: left promiscuous mode [ 78.498686][ T56] veth0_macvtap: left promiscuous mode [ 78.504208][ T56] veth1_vlan: left promiscuous mode [ 78.509672][ T56] veth0_vlan: left promiscuous mode [ 78.597541][ T56] team0 (unregistering): Port device team_slave_1 removed [ 78.608933][ T56] team0 (unregistering): Port device team_slave_0 removed