last executing test programs: 3.25160831s ago: executing program 3 (id=1007): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) 3.195423175s ago: executing program 4 (id=1008): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x8, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="94", 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r2, 0x0) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f914", 0x5d}, {&(0x7f0000000180)="fb63991b41f88bf97941257b22768c5649994cdffcd81c62a96638418b6b90ba370174b1e69d3aeaf474907a9d67650e5a58115561a8364aea553bedd54f691523e3dbdc9e0fd949a84baa76d60d6258fc4fcbf0b22f31659f296d5e41d74eaec4292c400b16319a7d3fbe4976edb50c8cb4b347c95ff701dd49164ab59018bd7e64a12d30d7cbd58b64", 0x8a}, {&(0x7f00000003c0)="ef8c68a3eac8e5432526e02ed9622e5dc0ec917001d3df9a4bf534c92d4b131528ba328c37560155be221a17cded70537f4a070f8f8621b6dacdfe34bfe7586019112ae444e6b88621aba0e0672ece8fe59bf03d0c304b", 0x57}, {&(0x7f0000000240)="1cd3a62b6d8112f03307fe54", 0xc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="1e9ce64ae26b8c554cea7e6651ecc6d9c8d57a08440e05ec5b1b1a8dad20f954014f43e453c65482fc659c9c851f33f7fcb1bfdea234bb03fc735461c5e746", 0x3f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000900)="2733e474b4d58cc624c8d59b70f9cb9c0892879fc42d05795e070ff37b021f4a2c731ad0adb89991a4cd150ca9f0588f3e5eb5343b3337e2ac62d33624a0cf7dff5f8869e902b6ef66bf61dab597f8937fa340f63df905d3ff11ca090277767c6a89260e876f5371d9883b012db570422584d46e2481f3cd2cb1560e9ba4a6ab28b728a6fe0f766d5be97b17b799d619a330c0a728f79918569b4f3683d30ff956ddb31eda876cc81635aba07ef939726ec7bfd53606f811a7f999e199228f2c6d899975", 0xc4}], 0x1}}], 0x3, 0x4) 2.395837618s ago: executing program 4 (id=1010): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 2.395302089s ago: executing program 3 (id=1020): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000e54) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff}) tee(r3, r2, 0x8, 0x0) 2.394150439s ago: executing program 2 (id=1013): rmdir(&(0x7f00000006c0)='./file1/file0\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00fffd000000000000001200ffffe0000012fe8000000000000000000000000000aa84"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ca37f200142c00"], 0x0) 2.227170374s ago: executing program 2 (id=1019): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x88, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) listen(r0, 0xfff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r4 = dup2(r2, r3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x4, 0x43, 0x9, 0x0, 0xfffffffffffffffe}) 2.155508231s ago: executing program 2 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000006b79009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 1.494911672s ago: executing program 4 (id=1038): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0x1, 0x7aa, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZt2v24/W0Fw86ogaGEstbNuCl5MvBDBwUCv3Uqaldm0GU061lKYQwRvBB1eCHqza1/mnbe+3Oq/oDcisjG1G068kMhJkzVd0y7dmnTazwfO9jznPOn3fM/Lc57kHJIAdq3h9J9MxIGIeC+JGKzPTyIiWyv1RhxbaXdreSmfTklUq6/+ltTa3FxeykfTa1J765X9EfHN2xEHM+vjlhcWpyeKxcJcvT5amTk7Wl5YPHRmZmKqMFWYPTI2Pn746DNH+7cv1z++X9x37f2Xnvz82F9vPXrl3W+TOBb76sua89guwzFc3ybZdBOu8eJ2B9thyRbbb+Nu5T6kp2bPylkeB2Iwemql9rTfEgB4kFyIiCoAsMskrv8AsMs0Pge4ubyUT6fqhZ39PKLbrr8QEXtW8m/c31xZ0lu/Z7endh904Gay5n5HEhFD2xB/OCI+/vL1T9MpOnQfEqCVNy9GxKmh4Ub/v9r/JOueWVjR/p37p9poM3xHXf8H3fNVOv55dnX8t3r+ZW6Pf6LF+Ke/xbl7L4Yj+prr68//zNVtCLOhdPz3fHb12bZbTfnXDfXUa/+vjfmyyekzxULatz0UESOR7U/rY5vEGLnx9401M3pWi83jv98vvfFJGj/9f7VF5mrvHV3u5ERl4n7zbrh+MeKx3lb5J7f3f7LB+PdEmzFefu6djzZaluaf5tuY1ua/1afKtq56OeKJaJ1/Q7LZ84lHRmuHw2jjoGjhi58+HNgofvP+T6c0fuO9QDek+39g8/yHkubnNctbj/Hd5cGvN1p29/xbH/99yWu1cqPzOD9RqcyNRfQlr6yff3j1tY16o32a/8jjrc//zY7/9D3hqTbz773262f3nn9npflPbmn/b71w5dZ0z0bx29v/47XSSH1OO/1fuyt4P9sOAAAAAAAAAAAAAAAAAAAAAAAAANqViYh9kWRyt8uZTC638hvej8RAplgqVw6eLs3PTkbtt7KHIptpfNXlYNP3oY7Vvw+/UT98R/3piHg4Ij7o/1+tnsuXipM7nTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3d4Pf/U7/07/TaAQAds+euLW4UurIiAEDX3P36DwD817j+A8Dus/n1P9u19QAAusf7fwDYfVz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+nU/XP5aV8Wp88tzA/XTp3aLJQns7NzOdz+dLc2dxUqTRVLOTypZmml/7Q6u8VS6Wz4zE7f360UihXRssLiydnSvOzlZNnZiamCicL2a5lBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtKy8sTk8Ui4W5jhT66lE6GGL3FaqDKxv1QVmfzhd+PvTj/s3aXOrwYdxcqF7Y6a3RpcJO9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/x7/BAAA//910CYH") chdir(&(0x7f0000000240)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0xfffffffffffffffd, 0xbb) 1.436365478s ago: executing program 0 (id=1039): r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.435731657s ago: executing program 3 (id=1040): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000010085002100a000000085000000500000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x46060480) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) 1.355441755s ago: executing program 0 (id=1041): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000009b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1.228721456s ago: executing program 4 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbJKmptXkIGj1EhA0ULoxNbYKHioeRLBQ0LPtstmGmt1syW5KEwJaRPAiqCdBLz37o968+uOq/4UHaamaFiseJDKb2XTb7KabNsmi+/nAa9+bmc2b77yZeW93hpkA+tZ4+k8u4lBEfJREjGbTk4gYauQGI06sL3drdaWYpiTW1t74PWksc3N1pRgtn0kdyAqPR8QP70cczm2ut7a0PFcol0sLWXmyXjk/WVtaPnKuUpgtzZbmj01NTx89/vzxYzsX6J8/Lx+89vGrz3x94u/3Hrvy4Y9JnIiD2ezWOHbKeIxn22Qo3YR3eGWnK+uxpNcrwH1JD82B9aM8DsVoDDRyAMD/2TsRsQYA9JlE/w8Afab5O8DN1ZViM/X2F4m9df3liNi/Hn/z+ub6nMHsmt3+xnXQkZvJHVdGkogY24H6xyPi82/f+jJNsUvXIQHaefdSRJwZG998/k823bOwXc92scz4XWXnP9g736Xjnxfajf9yG+OfaDP+GW5z7N6Pex//uas7UE1H15+MeKnl3rZbLfFnxgay0sONMd9QcvZcuZSe2x6JiIkYGk7LU1vUMXHjnxud5rWO//745O0v0vrT/28vkbs6OHznZ2YK9cKDxNzq+qWIJwbbxZ9stH/SYfx7qss6Xnvxg886zUvjT+Ntps3x7661yxFPt23/23e0JVvenzjZ2B0mmztFG9/88ulIp/pb2z9Naf3N7wJ7IW3/ka3jH0ta79esbb+Ony6Pft9p3r3jb7//70vebOT3ZdMuFur1hamIfcnrm6cfvf3ZrPxQZMun8U881f7432r/T78Tnuky/sFrv311//HvrjT+mW21//YzV27NDXSqv7v2n27kJrIp3Zz/ul3BB9l2AAAAAAAAAAAAAAAAAAAAAAAAANCtXEQcjCSX38jncvn8+ju8H42RXLlaqx8+W12cn4nGu7LHYijXfNTlaMvzUKey5+E3y0fvKj/X8kTBtJwvVsszPY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJoOdHj/f+rX4V6vHQCwa/b3egUAgD2n/weA/qP/B4D+o/8HgP6j/weA/qP/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJedOnkyTWt/ra4U0/LMhaXFueqFIzOl2ly+sljMF6sL5/Oz1epsuZQvViv3+nvlavX8dMwvXpysl2r1ydrS8ulKdXG+fvpcpTBbOl0a2pOoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB7akvLc4VyubQgIyMjs5Hp9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/h3wAAAP//HxYpBQ==") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x4b71) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.226386507s ago: executing program 2 (id=1043): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) rename(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a0101"], 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 1.175471722s ago: executing program 0 (id=1044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4c7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 1.144035714s ago: executing program 2 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0xabb}, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.115435157s ago: executing program 0 (id=1046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x66}, 0x100, 0x0, 0x2}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000015000000540001800d0001"], 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x81, @private1, 0xf9}}, 0x7, 0x2}, &(0x7f0000000200)=0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9002000016000100000000000000000000000000000000000000000000000000ff010000000000000000", @ANYRES32, @ANYRES16=r6, @ANYBLOB="000000000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000fd000000000000000005000000050000000a0010"], 0x290}}, 0x0) 967.064261ms ago: executing program 0 (id=1048): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 926.477785ms ago: executing program 4 (id=1049): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) 689.664506ms ago: executing program 1 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_ext_rm_leaf\x00', r2}, 0x10) fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40305829, &(0x7f0000000240)) 628.655922ms ago: executing program 1 (id=1053): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 606.644264ms ago: executing program 1 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) lstat(0x0, 0x0) 593.762675ms ago: executing program 1 (id=1055): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40400c4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) 539.294611ms ago: executing program 1 (id=1056): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x6, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 538.56823ms ago: executing program 3 (id=1066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006d00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffffffffffffff4a) 524.887352ms ago: executing program 1 (id=1057): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 524.726092ms ago: executing program 3 (id=1058): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00}) close_range(r4, 0xffffffffffffffff, 0x0) 507.583893ms ago: executing program 3 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 255.417797ms ago: executing program 2 (id=1060): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x208080, &(0x7f0000000600)={[{@orlov}, {@sb={'sb', 0x3d, 0xffffffffffffff64}}, {@sb={'sb', 0x3d, 0x7f}}], [{@uid_gt}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '+%[*)(i-\xcd\xcbY\xc3\xa2m\x1f\x80\xbd4\xef\xeb\x19&\xa0\x06\x87\xdbV\xe4qo\xa5\xa4\xcd\aQ-\x10\xfd\xcaK\x9d\nif\x8d\xbb\xd9j\x04\x93\xe1[\xbd\xf5\xe97\xcc\xe6lS\x88\xe0\xed\xfd\xc9\xfb\x0e\xbfA\x95X\x82Dy\n\xa8KZ\xe3g\x1e\xea\xe2\xb5m\t\xa9\x00'/98}}]}, 0x1, 0x5a9, &(0x7f00000014c0)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 126.048029ms ago: executing program 0 (id=1061): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x1d, 0x0, 0x0, {0x2, 0x1, 0x4}, 0x2}, 0x18, &(0x7f00000005c0)={&(0x7f0000000580)="0e031594a4f833666d", 0x9}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 4 (id=1062): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000e54) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff}) tee(r3, r2, 0x8, 0x0) kernel console output (not intermixed with test programs): devsim4 netdevsim3: renamed from eth3 [ 106.514612][ T3326] tipc: Node number set to 1 [ 106.563498][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.602221][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.625970][ T6667] netlink: 256 bytes leftover after parsing attributes in process `syz.0.600'. [ 106.635456][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.642505][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.659659][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.666723][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.720046][ T6403] veth0_vlan: entered promiscuous mode [ 106.747590][ T6403] veth1_vlan: entered promiscuous mode [ 106.797497][ T6403] veth0_macvtap: entered promiscuous mode [ 106.811652][ T6403] veth1_macvtap: entered promiscuous mode [ 106.845307][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.855841][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.865872][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.876317][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.886236][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.896656][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.908983][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.920574][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.931258][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.941247][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.951735][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.961559][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.972171][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.002773][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.013567][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.031862][ T6403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.040782][ T6403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.049731][ T6403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.058583][ T6403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.724032][ T6505] veth0_vlan: entered promiscuous mode [ 107.801547][ T6505] veth1_vlan: entered promiscuous mode [ 107.858678][ T6505] veth0_macvtap: entered promiscuous mode [ 107.887168][ T6752] loop0: detected capacity change from 0 to 128 [ 107.905568][ T6505] veth1_macvtap: entered promiscuous mode [ 107.934776][ T6752] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.972743][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.983225][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.993144][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.003554][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.013409][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.023879][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.033743][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.044268][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.060117][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.070933][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.080370][ T6752] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.081473][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.081486][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.133966][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.143853][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.154383][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.164235][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.174805][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.192524][ T6765] loop2: detected capacity change from 0 to 512 [ 108.192842][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.235074][ T6765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.257031][ T6765] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.273862][ T6757] syzkaller0: entered promiscuous mode [ 108.279501][ T6757] syzkaller0: entered allmulticast mode [ 108.287664][ T6505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.296489][ T6505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.305216][ T6505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.313935][ T6505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.343186][ T6765] pim6reg1: entered promiscuous mode [ 108.348590][ T6765] pim6reg1: entered allmulticast mode [ 108.373090][ T6280] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.439593][ T6774] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.460335][ T6403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.468395][ T6778] loop4: detected capacity change from 0 to 4096 [ 108.490353][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.629817][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.660459][ T6792] loop4: detected capacity change from 0 to 256 [ 108.671861][ T6792] vfat: Unknown parameter 'uni_xlat' [ 108.711835][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.723625][ T6795] netlink: 256 bytes leftover after parsing attributes in process `syz.3.623'. [ 108.777200][ T6802] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.777200][ T6802] The task syz.2.620 (6802) triggered the difference, watch for misbehavior. [ 109.394459][ T6818] loop3: detected capacity change from 0 to 128 [ 109.407286][ T6818] bio_check_eod: 81 callbacks suppressed [ 109.407296][ T6818] syz.3.631: attempt to access beyond end of device [ 109.407296][ T6818] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 109.430112][ T6818] syz.3.631: attempt to access beyond end of device [ 109.430112][ T6818] loop3: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 109.450635][ T6818] syz.3.631: attempt to access beyond end of device [ 109.450635][ T6818] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 109.464092][ T6818] buffer_io_error: 43 callbacks suppressed [ 109.464109][ T6818] Buffer I/O error on dev loop3, logical block 177, lost async page write [ 109.510441][ T6820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.673828][ T6838] loop0: detected capacity change from 0 to 512 [ 109.696952][ T6838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.714347][ T6838] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.745360][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.470651][ T6845] loop4: detected capacity change from 0 to 512 [ 110.488887][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 110.488899][ T29] audit: type=1400 audit(1727466689.906:1953): avc: denied { unmount } for pid=6280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.490196][ T6845] EXT4-fs: Ignoring removed oldalloc option [ 110.539382][ T6845] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.643: Parent and EA inode have the same ino 15 [ 110.545808][ T6853] loop0: detected capacity change from 0 to 128 [ 110.569807][ T6853] syz.0.645: attempt to access beyond end of device [ 110.569807][ T6853] loop0: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 110.585362][ T6853] syz.0.645: attempt to access beyond end of device [ 110.585362][ T6853] loop0: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 110.598821][ T6845] EXT4-fs (loop4): Remounting filesystem read-only [ 110.605455][ T6845] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 110.624187][ T6845] EXT4-fs (loop4): 1 orphan inode deleted [ 110.639100][ T6845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.646370][ T6853] syz.0.645: attempt to access beyond end of device [ 110.646370][ T6853] loop0: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 110.664744][ T6853] Buffer I/O error on dev loop0, logical block 177, lost async page write [ 110.675306][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 110.679768][ T6845] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 110.684255][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 110.699771][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 110.713271][ T6845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.713452][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 110.768743][ T6868] loop0: detected capacity change from 0 to 512 [ 110.786809][ T6865] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.822753][ T6872] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 110.833585][ T6868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.834604][ T6847] chnl_net:caif_netlink_parms(): no params data found [ 110.846268][ T6868] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.916073][ T6868] pim6reg1: entered promiscuous mode [ 110.921451][ T6868] pim6reg1: entered allmulticast mode [ 110.952624][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.959933][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.967856][ T6847] bridge_slave_0: entered allmulticast mode [ 110.974251][ T6847] bridge_slave_0: entered promiscuous mode [ 110.982419][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.990300][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.997551][ T6847] bridge_slave_1: entered allmulticast mode [ 111.004169][ T6847] bridge_slave_1: entered promiscuous mode [ 111.020739][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.024294][ T6882] syzkaller0: entered promiscuous mode [ 111.035471][ T6882] syzkaller0: entered allmulticast mode [ 111.063362][ T6886] loop0: detected capacity change from 0 to 512 [ 111.071064][ T6886] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 111.082471][ T6884] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 111.086100][ T6886] EXT4-fs (loop0): invalid journal inode [ 111.098638][ T6886] EXT4-fs (loop0): can't get journal size [ 111.112508][ T6886] EXT4-fs (loop0): 1 truncate cleaned up [ 111.118574][ T6886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.130926][ T3515] bond0: left allmulticast mode [ 111.135830][ T3515] bond_slave_0: left allmulticast mode [ 111.141302][ T3515] bond_slave_1: left allmulticast mode [ 111.147010][ T3515] dummy0: left allmulticast mode [ 111.151965][ T3515] bond0: left promiscuous mode [ 111.156840][ T3515] bond_slave_0: left promiscuous mode [ 111.162270][ T3515] bond_slave_1: left promiscuous mode [ 111.167818][ T3515] dummy0: left promiscuous mode [ 111.172848][ T3515] bridge0: port 3(bond0) entered disabled state [ 111.181446][ T29] audit: type=1400 audit(1727466690.596:1954): avc: denied { rmdir } for pid=6885 comm="syz.0.653" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 111.212037][ T3515] bridge_slave_1: left allmulticast mode [ 111.215175][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.217809][ T3515] bridge_slave_1: left promiscuous mode [ 111.232845][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.241048][ T3515] bridge_slave_0: left allmulticast mode [ 111.246756][ T3515] bridge_slave_0: left promiscuous mode [ 111.252427][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.283575][ T3515] batman_adv: batadv0: Removing interface: erspan1 [ 111.347652][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.357309][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.366878][ T3515] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 111.376455][ T3515] bond0 (unregistering): Released all slaves [ 111.388536][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.399537][ T6884] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 111.426282][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.461564][ T3515] hsr_slave_0: left promiscuous mode [ 111.464973][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 111.474782][ T6892] loop0: detected capacity change from 0 to 1024 [ 111.483226][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.494847][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.516393][ T6892] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.527400][ T6892] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 111.566296][ T6892] EXT4-fs (loop0): invalid journal inode [ 111.571990][ T6892] EXT4-fs (loop0): can't get journal size [ 111.597392][ T6892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.616273][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 111.626778][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 111.678778][ T6847] team0: Port device team_slave_0 added [ 111.688515][ T6896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.708843][ T6847] team0: Port device team_slave_1 added [ 111.732385][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.739453][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.765821][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.845505][ T6896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.856397][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.874440][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.881873][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.907938][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.947398][ T6929] loop3: detected capacity change from 0 to 1024 [ 111.957964][ T6929] EXT4-fs: Ignoring removed orlov option [ 111.958003][ T6926] loop0: detected capacity change from 0 to 4096 [ 111.963702][ T6929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.990458][ T6847] hsr_slave_0: entered promiscuous mode [ 111.998439][ T6933] loop4: detected capacity change from 0 to 2048 [ 112.005637][ T6847] hsr_slave_1: entered promiscuous mode [ 112.017111][ T6933] loop4: p1 < > p3 [ 112.017462][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.029330][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.043576][ T6933] loop4: p3 size 134217728 extends beyond EOD, truncated [ 112.053607][ T6847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.061297][ T6847] Cannot create hsr debugfs directory [ 112.112168][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.125924][ T6896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.169188][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.209930][ T6896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.296855][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 112.304477][ T6954] loop0: detected capacity change from 0 to 512 [ 112.309850][ T6896] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.335300][ T3515] IPVS: stop unused estimator thread 0... [ 112.357844][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 112.366627][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.380609][ T6954] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.384383][ T6896] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.443087][ T6967] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.445408][ T6896] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.451094][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.464303][ T6896] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.477498][ T29] audit: type=1326 audit(1727466691.896:1955): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.3.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x0 [ 112.481391][ T6969] loop4: detected capacity change from 0 to 256 [ 112.550870][ T6974] loop2: detected capacity change from 0 to 128 [ 112.606126][ T6974] syz.2.677: attempt to access beyond end of device [ 112.606126][ T6974] loop2: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 112.621243][ T6974] syz.2.677: attempt to access beyond end of device [ 112.621243][ T6974] loop2: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 112.635802][ T6974] syz.2.677: attempt to access beyond end of device [ 112.635802][ T6974] loop2: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 112.640134][ T6988] loop4: detected capacity change from 0 to 512 [ 112.649206][ T6974] Buffer I/O error on dev loop2, logical block 177, lost async page write [ 112.682215][ T6988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.701525][ T6988] EXT4-fs (loop4): 1 truncate cleaned up [ 112.709880][ T6988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.741810][ T7003] netlink: 199796 bytes leftover after parsing attributes in process `syz.2.674'. [ 112.817953][ T6847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.827899][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.843681][ T7013] loop0: detected capacity change from 0 to 512 [ 112.847959][ T6847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.855178][ T7013] EXT4-fs: Ignoring removed orlov option [ 112.877401][ T7013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.894017][ T7013] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.913144][ T6847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.929285][ T6847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.953989][ T7009] syzkaller0: entered promiscuous mode [ 112.959510][ T7009] syzkaller0: entered allmulticast mode [ 112.981138][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.046783][ T6847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.063060][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.099374][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.106543][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.126670][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.133762][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.157603][ T6847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.239940][ T6847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.288722][ T7070] loop4: detected capacity change from 0 to 128 [ 113.304788][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 113.344449][ T7071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.381540][ T6847] veth0_vlan: entered promiscuous mode [ 113.399205][ T6847] veth1_vlan: entered promiscuous mode [ 113.414696][ T7071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.472078][ T6847] veth0_macvtap: entered promiscuous mode [ 113.479319][ T6847] veth1_macvtap: entered promiscuous mode [ 113.489129][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.499681][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.509516][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.520241][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.530079][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.540761][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.550791][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.561301][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.571142][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.581777][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.592521][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.602779][ T7094] loop2: detected capacity change from 0 to 128 [ 113.603716][ T7071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.622420][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.633362][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.639492][ T7091] syz.2.681: attempt to access beyond end of device [ 113.639492][ T7091] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 113.643379][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.667045][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.676893][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.687356][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.697173][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.707689][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.717506][ T6847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.728035][ T6847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.739285][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.748578][ T6847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.757439][ T6847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.766266][ T6847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.775023][ T6847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.793175][ T7071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.937293][ T7071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.949138][ T7071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.966483][ T7071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.980753][ T7071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.189669][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 114.423763][ T7113] loop0: detected capacity change from 0 to 128 [ 114.451833][ T7113] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.466427][ T7113] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.573488][ T6280] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.833258][ T7131] syz.1.694[7131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.833381][ T7131] syz.1.694[7131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.845356][ T7131] syz.1.694[7131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.862399][ C1] net_ratelimit: 5 callbacks suppressed [ 114.862416][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.912046][ T29] audit: type=1400 audit(1727466694.326:1956): avc: denied { connect } for pid=7135 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.965463][ T29] audit: type=1400 audit(1727466694.386:1957): avc: denied { accept } for pid=7135 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.967288][ T7142] syz.4.709[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.989443][ T7140] loop2: detected capacity change from 0 to 512 [ 114.994862][ T7142] syz.4.709[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.002975][ T7140] EXT4-fs: Ignoring removed oldalloc option [ 115.017283][ T7142] syz.4.709[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.040931][ T7143] pim6reg: entered allmulticast mode [ 115.041809][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.064793][ T7143] pim6reg: left allmulticast mode [ 115.070923][ T7140] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.698: Parent and EA inode have the same ino 15 [ 115.085283][ T7140] EXT4-fs (loop2): Remounting filesystem read-only [ 115.091821][ T7140] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 115.102228][ T7140] EXT4-fs (loop2): 1 orphan inode deleted [ 115.108615][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.120904][ T7140] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 115.128938][ T7140] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.169211][ T7148] syz.4.711[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.169288][ T7148] syz.4.711[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.181131][ T7148] syz.4.711[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.188896][ T7146] loop2: detected capacity change from 0 to 4096 [ 115.210891][ T7148] syz.4.711[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.213837][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.237086][ T7148] bridge_slave_0 (unregistering): left allmulticast mode [ 115.241713][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.244163][ T7148] bridge_slave_0 (unregistering): left promiscuous mode [ 115.263650][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.323061][ T6403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.347606][ T7151] netlink: 'syz.4.701': attribute type 4 has an invalid length. [ 115.348499][ T29] audit: type=1326 audit(1727466694.766:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.384090][ T7153] loop2: detected capacity change from 0 to 512 [ 115.392561][ T7153] EXT4-fs: Ignoring removed bh option [ 115.398373][ T29] audit: type=1326 audit(1727466694.806:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.421850][ T29] audit: type=1326 audit(1727466694.806:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52cd3ce033 code=0x7ffc0000 [ 115.445011][ T29] audit: type=1326 audit(1727466694.806:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52cd3ccadf code=0x7ffc0000 [ 115.468252][ T29] audit: type=1326 audit(1727466694.806:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f52cd3ce087 code=0x7ffc0000 [ 115.493546][ T7153] EXT4-fs error (device loop2): __ext4_iget:4952: inode #15: block 1803188595: comm syz.2.700: invalid block [ 115.520158][ T7153] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.700: couldn't read orphan inode 15 (err -117) [ 115.532544][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.545748][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 115.545762][ T29] audit: type=1326 audit(1727466694.966:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52cd3cc990 code=0x7ffc0000 [ 115.575239][ T29] audit: type=1326 audit(1727466694.966:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f52cd3ccd77 code=0x7ffc0000 [ 115.598576][ T29] audit: type=1326 audit(1727466694.966:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52cd3cc990 code=0x7ffc0000 [ 115.622093][ T29] audit: type=1326 audit(1727466694.966:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.645466][ T29] audit: type=1326 audit(1727466694.966:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.669280][ T6403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.669350][ T29] audit: type=1326 audit(1727466694.966:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.701535][ T29] audit: type=1326 audit(1727466694.966:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.724868][ T29] audit: type=1326 audit(1727466694.966:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.748152][ T29] audit: type=1326 audit(1727466694.976:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.771511][ T29] audit: type=1326 audit(1727466694.976:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cd3cdff9 code=0x7ffc0000 [ 115.812611][ T7161] loop2: detected capacity change from 0 to 256 [ 115.819521][ T7161] vfat: Unknown parameter 'uni_xlat' [ 115.862069][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.953024][ T7165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.960990][ T1012] IPVS: starting estimator thread 0... [ 115.989073][ T7170] loop4: detected capacity change from 0 to 256 [ 115.999366][ T7170] msdos: Unknown parameter 'ÿPL' [ 116.006961][ T7172] __nla_validate_parse: 1 callbacks suppressed [ 116.006973][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 116.040914][ T7172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.074715][ T7168] IPVS: using max 2928 ests per chain, 146400 per kthread [ 116.802094][ T7190] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.827330][ T7195] loop0: detected capacity change from 0 to 128 [ 117.766145][ T7212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.837071][ T7217] loop4: detected capacity change from 0 to 1024 [ 117.856223][ T7217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.927450][ T7221] EXT4-fs (loop4): shut down requested (0) [ 117.988198][ T3497] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 118.018773][ T3497] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 118.031611][ T3497] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.031611][ T3497] [ 118.041489][ T3497] EXT4-fs (loop4): Total free blocks count 0 [ 118.047518][ T3497] EXT4-fs (loop4): Free/Dirty block details [ 118.053416][ T3497] EXT4-fs (loop4): free_blocks=68451041280 [ 118.059272][ T3497] EXT4-fs (loop4): dirty_blocks=5776 [ 118.064611][ T3497] EXT4-fs (loop4): Block reservation details [ 118.070671][ T3497] EXT4-fs (loop4): i_reserved_data_blocks=361 [ 118.113648][ T7172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.136674][ T7224] loop0: detected capacity change from 0 to 512 [ 118.147963][ T7224] EXT4-fs: Ignoring removed bh option [ 118.157515][ T7224] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.730: invalid block [ 118.169613][ T7224] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.730: couldn't read orphan inode 15 (err -117) [ 118.182159][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.197775][ T7172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.210215][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.231890][ T7229] loop0: detected capacity change from 0 to 1024 [ 118.256533][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.257612][ T7172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.271336][ T7229] EXT4-fs error (device loop0): ext4_lookup:1813: inode #15: comm syz.0.731: iget: bad extended attribute block 8388352 [ 118.292394][ T7229] EXT4-fs (loop0): Remounting filesystem read-only [ 118.349626][ T7172] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.360154][ T7172] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.371471][ T7172] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.382510][ T7172] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.686723][ T7245] tc_dump_action: action bad kind [ 118.707502][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.735'. [ 118.745088][ T7249] loop3: detected capacity change from 0 to 4096 [ 118.754392][ T7249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.817564][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.088458][ T7256] loop4: detected capacity change from 0 to 512 [ 119.107153][ T7256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.120132][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.121010][ T7256] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.165837][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.179410][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.192945][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.206450][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.219996][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.233457][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.246894][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.260310][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.273762][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.287148][ T6505] EXT4-fs error (device loop4): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 119.555741][ T6505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.568167][ T3497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.658012][ T3497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.718774][ T3497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.746801][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 119.756679][ T7281] loop3: detected capacity change from 0 to 8192 [ 119.764278][ T7281] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.778401][ T3497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.821819][ T7287] loop3: detected capacity change from 0 to 2048 [ 119.835252][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.842489][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.849985][ T7268] bridge_slave_0: entered allmulticast mode [ 119.852664][ T7287] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 119.856519][ T7268] bridge_slave_0: entered promiscuous mode [ 119.870064][ T7287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.870620][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.882872][ T7287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.889260][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.905845][ T7268] bridge_slave_1: entered allmulticast mode [ 119.912238][ T7268] bridge_slave_1: entered promiscuous mode [ 119.947919][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.961665][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.977930][ T3497] bridge_slave_1: left allmulticast mode [ 119.983597][ T3497] bridge_slave_1: left promiscuous mode [ 119.989540][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.108744][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.120339][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.130902][ T3497] bond0 (unregistering): Released all slaves [ 120.147304][ T7268] team0: Port device team_slave_0 added [ 120.153881][ T7268] team0: Port device team_slave_1 added [ 120.168502][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.175577][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.201581][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.213198][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.220233][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.246194][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.259370][ T3497] hsr_slave_0: left promiscuous mode [ 120.265496][ T3497] hsr_slave_1: left promiscuous mode [ 120.271117][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.278568][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.286368][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.293882][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.305413][ T3497] veth1_macvtap: left promiscuous mode [ 120.311158][ T3497] veth0_macvtap: left promiscuous mode [ 120.316913][ T3497] veth1_vlan: left promiscuous mode [ 120.322200][ T3497] veth0_vlan: left promiscuous mode [ 120.424175][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 120.435098][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 120.491289][ T7268] hsr_slave_0: entered promiscuous mode [ 120.498001][ T7268] hsr_slave_1: entered promiscuous mode [ 120.612258][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 120.808830][ T3497] IPVS: stop unused estimator thread 0... [ 120.942530][ T7268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.956669][ T7268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.968203][ T7268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.987311][ T7268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.030496][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.045888][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.057715][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.064868][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.086681][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.093792][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.235120][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.388825][ T7268] veth0_vlan: entered promiscuous mode [ 121.396725][ T7268] veth1_vlan: entered promiscuous mode [ 121.413449][ T7268] veth0_macvtap: entered promiscuous mode [ 121.427469][ T7268] veth1_macvtap: entered promiscuous mode [ 121.427668][ T7386] loop0: detected capacity change from 0 to 1024 [ 121.438186][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.450277][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.460127][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.470644][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.480510][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.486604][ T7386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.491006][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.491021][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.491034][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.491857][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.544300][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.554781][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.564658][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.575129][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.585475][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.595904][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.605745][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.616226][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.626091][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.636785][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.647358][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.655648][ T7268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.664413][ T7268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.673212][ T7268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.682044][ T7268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.725082][ T7394] loop3: detected capacity change from 0 to 2048 [ 121.736160][ T7394] loop3: p1 < > p3 [ 121.740490][ T7394] loop3: p3 size 134217728 extends beyond EOD, truncated [ 121.772358][ T28] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 121.787518][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 121.800027][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.800027][ T28] [ 121.809807][ T28] EXT4-fs (loop0): Total free blocks count 0 [ 121.815890][ T28] EXT4-fs (loop0): Free/Dirty block details [ 121.821980][ T28] EXT4-fs (loop0): free_blocks=68451041280 [ 121.827835][ T28] EXT4-fs (loop0): dirty_blocks=10272 [ 121.833219][ T28] EXT4-fs (loop0): Block reservation details [ 121.839238][ T28] EXT4-fs (loop0): i_reserved_data_blocks=642 [ 121.855613][ T3497] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 122.045145][ T7405] netlink: 72 bytes leftover after parsing attributes in process `syz.0.757'. [ 122.055145][ T7406] loop3: detected capacity change from 0 to 512 [ 122.067286][ T7406] EXT4-fs: Ignoring removed orlov option [ 122.077085][ T7405] netlink: 56 bytes leftover after parsing attributes in process `syz.0.757'. [ 122.096081][ T7406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.125571][ T7406] EXT4-fs (loop3): 1 orphan inode deleted [ 122.131338][ T7406] EXT4-fs (loop3): 1 truncate cleaned up [ 122.143895][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.163718][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 122.163783][ T29] audit: type=1400 audit(1727466701.576:2074): avc: denied { listen } for pid=7404 comm="syz.3.760" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.228584][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.271575][ T7413] loop3: detected capacity change from 0 to 1024 [ 122.552225][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 122.619517][ T7418] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.716269][ T7418] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.766323][ T7418] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.829762][ T7418] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.882956][ T7418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.918595][ T7418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.930682][ T7418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.993596][ T7418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.078623][ T29] audit: type=1326 audit(1727466703.496:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.0.767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeffa1dff9 code=0x0 [ 124.811199][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 124.848502][ T7457] syzkaller0: entered promiscuous mode [ 124.854182][ T7457] syzkaller0: entered allmulticast mode [ 124.959115][ T29] audit: type=1400 audit(1727466704.376:2076): avc: denied { bind } for pid=7461 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.981629][ T7462] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 124.992750][ T7462] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 125.094521][ T29] audit: type=1400 audit(1727466704.506:2077): avc: denied { create } for pid=7475 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.123978][ T7474] veth3: entered promiscuous mode [ 125.231432][ T7480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.238712][ T7480] IPv6: NLM_F_CREATE should be set when creating new route [ 125.245947][ T7480] IPv6: NLM_F_CREATE should be set when creating new route [ 125.602589][ T7487] loop4: detected capacity change from 0 to 512 [ 125.966195][ T7497] netlink: 116 bytes leftover after parsing attributes in process `syz.4.793'. [ 125.975408][ T7497] bridge_slave_1: left allmulticast mode [ 125.981098][ T7497] bridge_slave_1: left promiscuous mode [ 125.981213][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.982315][ T7497] bridge_slave_0: left allmulticast mode [ 125.982330][ T7497] bridge_slave_0: left promiscuous mode [ 125.982422][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.099569][ T29] audit: type=1326 audit(1727466705.516:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 126.123243][ T29] audit: type=1326 audit(1727466705.516:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 126.146629][ T29] audit: type=1326 audit(1727466705.516:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 126.170129][ T29] audit: type=1326 audit(1727466705.516:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 126.194105][ T29] audit: type=1326 audit(1727466705.566:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 126.217519][ T29] audit: type=1326 audit(1727466705.566:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeffa1dff9 code=0x7ffc0000 [ 131.033083][ T7511] serio: Serial port pts0 [ 131.046168][ T7515] loop0: detected capacity change from 0 to 128 [ 131.063049][ T7514] pim6reg1: entered promiscuous mode [ 131.068409][ T7514] pim6reg1: entered allmulticast mode [ 131.102047][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 131.147907][ T7536] loop4: detected capacity change from 0 to 128 [ 131.156450][ T7536] FAT-fs (loop4): bogus logical sector size 12 [ 131.162671][ T7536] FAT-fs (loop4): Can't find a valid FAT filesystem [ 131.197966][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 131.206906][ T7542] netlink: 'syz.0.802': attribute type 11 has an invalid length. [ 131.218228][ T7542] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.226996][ T7542] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.235770][ T7542] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.244456][ T7542] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.260876][ T7542] vxlan0: entered promiscuous mode [ 131.313164][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 131.394371][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.401637][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.418394][ T7518] bridge_slave_0: entered allmulticast mode [ 131.425328][ T7518] bridge_slave_0: entered promiscuous mode [ 131.440630][ T7561] veth3: entered promiscuous mode [ 131.495417][ T7560] syzkaller0: entered promiscuous mode [ 131.500924][ T7560] syzkaller0: entered allmulticast mode [ 131.515385][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.522539][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.531477][ T7518] bridge_slave_1: entered allmulticast mode [ 131.549245][ T7518] bridge_slave_1: entered promiscuous mode [ 131.586699][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.597572][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.637651][ T7518] team0: Port device team_slave_0 added [ 131.649280][ T7518] team0: Port device team_slave_1 added [ 131.658039][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 131.666951][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 131.690425][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.697440][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.723381][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.743984][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.751087][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.777517][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.815740][ T7518] hsr_slave_0: entered promiscuous mode [ 131.822114][ T7518] hsr_slave_1: entered promiscuous mode [ 131.829755][ T7518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.842379][ T7518] Cannot create hsr debugfs directory [ 131.900785][ T7569] loop3: detected capacity change from 0 to 512 [ 131.918755][ T7569] journal_path: Lookup failure for './file0' [ 131.924818][ T7569] EXT4-fs: error: could not find journal device path [ 131.956698][ T7518] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.005303][ T7569] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 132.046274][ T7518] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.066959][ T7569] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 132.152695][ T7518] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.246534][ T7518] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.269508][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 132.343703][ T7593] loop0: detected capacity change from 0 to 2048 [ 132.365555][ T7518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.375419][ T7518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.375425][ T7593] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.822: casefold flag without casefold feature [ 132.396358][ T7593] EXT4-fs (loop0): get root inode failed [ 132.402346][ T7593] EXT4-fs (loop0): mount failed [ 132.405210][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 132.405222][ T29] audit: type=1400 audit(1727466711.816:2091): avc: denied { create } for pid=7596 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 132.438536][ T7518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.448743][ T7518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.485108][ T7597] loop4: detected capacity change from 0 to 2048 [ 132.493690][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.506030][ T7597] EXT4-fs mount: 2 callbacks suppressed [ 132.506045][ T7597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.514468][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.538193][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.545353][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.553403][ T29] audit: type=1400 audit(1727466711.966:2092): avc: denied { read } for pid=7596 comm="syz.4.823" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 132.589583][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.596714][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.620735][ T7597] @: renamed from bond0 (while UP) [ 132.677300][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.746306][ T7518] veth0_vlan: entered promiscuous mode [ 132.756219][ T7518] veth1_vlan: entered promiscuous mode [ 132.781139][ T7636] syzkaller0: entered promiscuous mode [ 132.786726][ T7636] syzkaller0: entered allmulticast mode [ 132.800676][ T7518] veth0_macvtap: entered promiscuous mode [ 132.809531][ T7268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.810530][ T7518] veth1_macvtap: entered promiscuous mode [ 132.836755][ T3497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.853312][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.863847][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.873804][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.884316][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.894269][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.904792][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.914710][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.925150][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.934987][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.945473][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.957907][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.978946][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.989513][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.999389][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.009836][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.019731][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.030172][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.040020][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.050459][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.060380][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.070831][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.080755][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.091169][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.101756][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.113587][ T7518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.122406][ T7518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.131240][ T7518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.140075][ T7518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.231742][ T7651] loop2: detected capacity change from 0 to 1024 [ 133.282422][ T3497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.295732][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.344392][ T29] audit: type=1400 audit(1727466712.746:2093): avc: denied { bind } for pid=7654 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.374142][ T7639] chnl_net:caif_netlink_parms(): no params data found [ 133.393764][ T29] audit: type=1326 audit(1727466712.806:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.417253][ T29] audit: type=1326 audit(1727466712.806:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.440621][ T29] audit: type=1326 audit(1727466712.806:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.464217][ T29] audit: type=1326 audit(1727466712.806:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.487780][ T29] audit: type=1326 audit(1727466712.806:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.488285][ T7664] EXT4-fs (loop2): shut down requested (0) [ 133.511271][ T29] audit: type=1326 audit(1727466712.806:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.540692][ T29] audit: type=1326 audit(1727466712.806:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.3.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 133.590034][ T3497] @: (slave netdevsim1): Releasing backup interface [ 133.629850][ T7670] loop0: detected capacity change from 0 to 2048 [ 133.636895][ T3497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.651292][ T7670] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.669761][ T7670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.692558][ T3488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 133.717218][ T3488] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 133.729890][ T3488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.729890][ T3488] [ 133.739556][ T3488] EXT4-fs (loop2): Total free blocks count 0 [ 133.745566][ T3488] EXT4-fs (loop2): Free/Dirty block details [ 133.751519][ T3488] EXT4-fs (loop2): free_blocks=68451041280 [ 133.757401][ T3488] EXT4-fs (loop2): dirty_blocks=16384 [ 133.762819][ T3488] EXT4-fs (loop2): Block reservation details [ 133.768819][ T3488] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 133.776605][ T3497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.927085][ T7670] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.839: bg 0: block 234: padding at end of block bitmap is not set [ 133.956321][ T7670] EXT4-fs (loop0): Remounting filesystem read-only [ 133.976966][ T7689] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 133.987746][ T3497] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.018725][ T3497] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.045356][ T3497] @ (unregistering): Released all slaves [ 134.059929][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.067144][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.080953][ T7639] bridge_slave_0: entered allmulticast mode [ 134.089328][ T7639] bridge_slave_0: entered promiscuous mode [ 134.099125][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.106249][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.113651][ T7639] bridge_slave_1: entered allmulticast mode [ 134.120472][ T7639] bridge_slave_1: entered promiscuous mode [ 134.144923][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.157038][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 134.170468][ T3497] hsr_slave_0: left promiscuous mode [ 134.178431][ T3497] hsr_slave_1: left promiscuous mode [ 134.209863][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.217416][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.236936][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.244352][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.266148][ T3497] veth1_macvtap: left promiscuous mode [ 134.271733][ T3497] veth0_macvtap: left promiscuous mode [ 134.277338][ T3497] veth1_vlan: left promiscuous mode [ 134.282618][ T3497] veth0_vlan: left promiscuous mode [ 134.392639][ T7714] loop2: detected capacity change from 0 to 2048 [ 134.440266][ T7714] Alternate GPT is invalid, using primary GPT. [ 134.446705][ T7714] loop2: p2 p3 p7 [ 134.534128][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 134.544284][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 134.609315][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 134.624798][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.628963][ T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:1) [ 134.637350][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.663873][ T7639] team0: Port device team_slave_0 added [ 134.671364][ T7639] team0: Port device team_slave_1 added [ 134.695245][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.702216][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.704106][ T7721] loop2: detected capacity change from 0 to 1024 [ 134.728283][ T7639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.735162][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.752471][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.778409][ T7639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.796096][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.822163][ T7639] hsr_slave_0: entered promiscuous mode [ 134.828321][ T7639] hsr_slave_1: entered promiscuous mode [ 134.873371][ T7725] EXT4-fs (loop2): shut down requested (0) [ 134.929004][ T3552] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 134.940960][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 134.950688][ T3552] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.965079][ T3552] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.965079][ T3552] [ 134.974730][ T3552] EXT4-fs (loop2): Total free blocks count 0 [ 134.980737][ T3552] EXT4-fs (loop2): Free/Dirty block details [ 134.986781][ T3552] EXT4-fs (loop2): free_blocks=68451041280 [ 134.992632][ T3552] EXT4-fs (loop2): dirty_blocks=6816 [ 134.997953][ T3552] EXT4-fs (loop2): Block reservation details [ 135.003960][ T3552] EXT4-fs (loop2): i_reserved_data_blocks=426 [ 135.154564][ T7735] tipc: Started in network mode [ 135.159459][ T7735] tipc: Node identity f7, cluster identity 4711 [ 135.165804][ T7735] tipc: Node number set to 247 [ 135.187510][ T7737] loop2: detected capacity change from 0 to 1024 [ 135.205734][ T7737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.249003][ T7639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.257671][ T7639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.266217][ T7639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.274519][ T7740] EXT4-fs (loop2): shut down requested (0) [ 135.275239][ T7639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.315895][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.332546][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.335780][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.352445][ T7639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.364539][ T7639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.366230][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 135.387358][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.387358][ T28] [ 135.397032][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 135.403063][ T28] EXT4-fs (loop2): Free/Dirty block details [ 135.408984][ T28] EXT4-fs (loop2): free_blocks=68451041280 [ 135.414832][ T28] EXT4-fs (loop2): dirty_blocks=7136 [ 135.420150][ T28] EXT4-fs (loop2): Block reservation details [ 135.425001][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.426258][ T28] EXT4-fs (loop2): i_reserved_data_blocks=446 [ 135.444305][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.451635][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.461386][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.468483][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.585701][ T7639] veth0_vlan: entered promiscuous mode [ 135.593728][ T7639] veth1_vlan: entered promiscuous mode [ 135.608574][ T7639] veth0_macvtap: entered promiscuous mode [ 135.616389][ T7639] veth1_macvtap: entered promiscuous mode [ 135.628249][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.638732][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.648714][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.659467][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.669351][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.679915][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.689856][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.700333][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.710190][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.720623][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.731305][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.741511][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.751974][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.761851][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.772344][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.782331][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.792886][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.802702][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.813102][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.822914][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.833337][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.843144][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.853631][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.864983][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.878936][ T7639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.887719][ T7639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.896529][ T7639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.905339][ T7639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.987763][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 136.010293][ T7777] Process accounting resumed [ 136.028220][ T7779] loop4: detected capacity change from 0 to 512 [ 136.037186][ T7779] EXT4-fs: Ignoring removed orlov option [ 136.043223][ T7779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.045496][ T7781] loop3: detected capacity change from 0 to 2048 [ 136.056016][ T7779] EXT4-fs (loop4): 1 orphan inode deleted [ 136.065213][ T7779] EXT4-fs (loop4): 1 truncate cleaned up [ 136.071390][ T7779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.171324][ T7781] Alternate GPT is invalid, using primary GPT. [ 136.177881][ T7781] loop3: p2 p3 p7 [ 136.182799][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.201011][ T7786] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.214147][ T7786] loop4: detected capacity change from 0 to 512 [ 136.221328][ T7786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.242714][ T7786] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 136.245981][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 136.267877][ T7786] EXT4-fs (loop4): 1 truncate cleaned up [ 136.273931][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.306185][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.329717][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 136.338772][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 144.534740][ T7807] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 144.542252][ T7807] EXT4-fs warning (device sda1): ext4_resize_fs:2040: can't shrink FS - resize aborted [ 144.625585][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 144.625599][ T29] audit: type=1400 audit(1727466724.046:2137): avc: denied { connect } for pid=7806 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.688476][ T7810] chnl_net:caif_netlink_parms(): no params data found [ 144.689765][ T7824] loop4: detected capacity change from 0 to 512 [ 144.703703][ T7824] journal_path: Lookup failure for './file0' [ 144.709818][ T7824] EXT4-fs: error: could not find journal device path [ 144.713230][ T7826] loop2: detected capacity change from 0 to 512 [ 144.724289][ T7826] EXT4-fs: Ignoring removed orlov option [ 144.730253][ T7826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.737992][ T7824] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 144.747646][ T7826] EXT4-fs (loop2): 1 orphan inode deleted [ 144.747679][ T7826] EXT4-fs (loop2): 1 truncate cleaned up [ 144.748038][ T7826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.777158][ T7824] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 144.809702][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.816932][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.826348][ T7810] bridge_slave_0: entered allmulticast mode [ 144.832895][ T7810] bridge_slave_0: entered promiscuous mode [ 144.833207][ T7518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.839916][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.854803][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.861993][ T7810] bridge_slave_1: entered allmulticast mode [ 144.868802][ T7810] bridge_slave_1: entered promiscuous mode [ 144.908072][ T7839] loop4: detected capacity change from 0 to 2048 [ 144.924237][ T7810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.935781][ T7810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.941117][ T7839] Alternate GPT is invalid, using primary GPT. [ 144.951238][ T7839] loop4: p2 p3 p7 [ 144.960855][ T7838] syzkaller0: entered promiscuous mode [ 144.966468][ T7838] syzkaller0: entered allmulticast mode [ 145.010358][ T7810] team0: Port device team_slave_0 added [ 145.016966][ T7810] team0: Port device team_slave_1 added [ 145.033999][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.041085][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.067148][ T7810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.078681][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.085715][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.111693][ T7810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.147246][ T7810] hsr_slave_0: entered promiscuous mode [ 145.157297][ T7810] hsr_slave_1: entered promiscuous mode [ 145.163689][ T29] audit: type=1326 audit(1727466724.576:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.2.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b71cdff9 code=0x0 [ 145.186692][ T7810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.194404][ T7810] Cannot create hsr debugfs directory [ 145.237808][ T29] audit: type=1326 audit(1727466724.656:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.295764][ T29] audit: type=1326 audit(1727466724.676:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.319143][ T29] audit: type=1326 audit(1727466724.676:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.342801][ T29] audit: type=1326 audit(1727466724.676:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.366340][ T29] audit: type=1326 audit(1727466724.676:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.389700][ T29] audit: type=1326 audit(1727466724.676:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.413041][ T29] audit: type=1326 audit(1727466724.676:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.436470][ T29] audit: type=1326 audit(1727466724.676:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.4.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efed22fdff9 code=0x7ffc0000 [ 145.468021][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 145.493281][ T7810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.503605][ T7810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.530951][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.538034][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.546069][ T7843] bridge_slave_0: entered allmulticast mode [ 145.552455][ T7843] bridge_slave_0: entered promiscuous mode [ 145.559364][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.566462][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.573614][ T7843] bridge_slave_1: entered allmulticast mode [ 145.580208][ T7843] bridge_slave_1: entered promiscuous mode [ 145.598624][ T7810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.608968][ T7810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.621844][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.632357][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.651082][ T7843] team0: Port device team_slave_0 added [ 145.657566][ T7843] team0: Port device team_slave_1 added [ 145.666044][ T7810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.676363][ T7810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.696204][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.703333][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.729350][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.743243][ T7810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.753528][ T7810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.771310][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.778360][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.804373][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.834685][ T7843] hsr_slave_0: entered promiscuous mode [ 145.840539][ T7877] loop3: detected capacity change from 0 to 256 [ 145.847268][ T7843] hsr_slave_1: entered promiscuous mode [ 145.847557][ T7877] FAT-fs (loop3): bogus number of FAT sectors [ 145.859036][ T7877] FAT-fs (loop3): Can't find a valid FAT filesystem [ 145.866267][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.873958][ T7843] Cannot create hsr debugfs directory [ 145.919251][ T7883] loop3: detected capacity change from 0 to 1024 [ 145.927613][ T7810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.927984][ T7883] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.950630][ T7810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.961792][ T7810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.970445][ T7810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.988428][ T7843] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.037207][ T7843] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.050772][ T7892] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 146.065064][ T7810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.078467][ T7810] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.087866][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.094960][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.105433][ T7843] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.118554][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.125652][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.163496][ T7843] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.286861][ T7906] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 146.289648][ T7843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.303628][ T7843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.315270][ T7843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.332656][ T7843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.349465][ T7810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.412415][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.435351][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.460964][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.468046][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.512764][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.519896][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.602172][ T7810] veth0_vlan: entered promiscuous mode [ 146.638456][ T7810] veth1_vlan: entered promiscuous mode [ 146.666104][ T7810] veth0_macvtap: entered promiscuous mode [ 146.677769][ T7810] veth1_macvtap: entered promiscuous mode [ 146.705377][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.716002][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.725829][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.736333][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.746215][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.756792][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.766740][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.777188][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.787046][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.797606][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.807527][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.817960][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.840545][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.862250][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.872878][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.882771][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.893373][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.903197][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.913707][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.923606][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.934043][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.943862][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.954587][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.964471][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.975008][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.985040][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.995498][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.014627][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.051203][ T7810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.060075][ T7810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.068989][ T7810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.077741][ T7810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.126907][ T7932] syzkaller0: entered promiscuous mode [ 147.132389][ T7932] syzkaller0: entered allmulticast mode [ 147.157189][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.225783][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 147.383702][ T7843] veth0_vlan: entered promiscuous mode [ 147.414345][ T7843] veth1_vlan: entered promiscuous mode [ 147.445902][ T7843] veth0_macvtap: entered promiscuous mode [ 147.454232][ T7843] veth1_macvtap: entered promiscuous mode [ 147.459182][ T7950] loop0: detected capacity change from 0 to 764 [ 147.473556][ T7950] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.521083][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.531636][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.541469][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.551968][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.561806][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.572274][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.582197][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.592644][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.602536][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.613212][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.623170][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.633725][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.643537][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.654018][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.666924][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.681009][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.691505][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.701345][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.711854][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.721712][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.732156][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.742099][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.752551][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.762380][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.772870][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.782762][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.793253][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.803105][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.813587][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.823402][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.833812][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.860852][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.870660][ T7843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.879523][ T7843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.888346][ T7843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.897180][ T7843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.911827][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 147.967543][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 148.265315][ T7978] loop3: detected capacity change from 0 to 2048 [ 148.283745][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.313850][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 148.334663][ T7978] bpf_get_probe_write_proto: 2 callbacks suppressed [ 148.334692][ T7978] syz.3.920[7978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.341411][ T7978] syz.3.920[7978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.353598][ T7978] syz.3.920[7978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.403049][ T24] IPVS: starting estimator thread 0... [ 148.469235][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.561670][ T7991] IPVS: using max 2976 ests per chain, 148800 per kthread [ 148.852617][ T8017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.935'. [ 148.871831][ T8015] loop4: detected capacity change from 0 to 512 [ 148.898147][ T8015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.911273][ T8015] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.949049][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.959270][ T8026] loop2: detected capacity change from 0 to 1024 [ 148.977728][ T8026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.990436][ T7973] dccp_close: ABORT with 96 bytes unread [ 149.076713][ T8032] usb usb8: usbfs: process 8032 (syz.0.939) did not claim interface 0 before use [ 149.122050][ T8039] loop0: detected capacity change from 0 to 512 [ 149.137088][ T8039] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 149.145422][ T8039] ref_ctr increment failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888116ef2f40 [ 149.168219][ T8039] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 149.176611][ T8039] ref_ctr decrement failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888116ef2f40 [ 149.190736][ T8039] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 149.199138][ T8039] ref_ctr decrement failed for inode: 0x31 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888116ef2f40 [ 149.213602][ T8039] uprobe: syz.0.942:8039 failed to unregister, leaking uprobe [ 149.235395][ T8043] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 149.263941][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 149.394196][ T8055] veth3: entered promiscuous mode [ 149.437125][ T8059] loop0: detected capacity change from 0 to 128 [ 149.463659][ T8059] syz.0.951: attempt to access beyond end of device [ 149.463659][ T8059] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 149.572954][ T28] kworker/u8:1: attempt to access beyond end of device [ 149.572954][ T28] loop0: rw=1, sector=249, nr_sectors = 792 limit=128 [ 149.773399][ T7518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.786759][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 149.786771][ T29] audit: type=1326 audit(1727466729.206:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.816312][ T29] audit: type=1326 audit(1727466729.206:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.841073][ T29] audit: type=1326 audit(1727466729.236:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.864548][ T29] audit: type=1326 audit(1727466729.236:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.887967][ T29] audit: type=1326 audit(1727466729.236:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.911407][ T29] audit: type=1326 audit(1727466729.236:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.934826][ T29] audit: type=1326 audit(1727466729.236:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.958216][ T29] audit: type=1326 audit(1727466729.236:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 149.981645][ T29] audit: type=1326 audit(1727466729.236:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 150.005305][ T29] audit: type=1326 audit(1727466729.236:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfef8dff9 code=0x7ffc0000 [ 150.284924][ T8098] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 150.432030][ T8107] syzkaller0: entered promiscuous mode [ 150.437604][ T8107] syzkaller0: entered allmulticast mode [ 150.649347][ T8113] loop2: detected capacity change from 0 to 512 [ 150.656641][ T8113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.700843][ T8113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.762612][ T8113] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.775248][ T8121] loop3: detected capacity change from 0 to 1024 [ 150.785540][ T8121] EXT4-fs: Ignoring removed bh option [ 150.817695][ T8121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.838944][ T8121] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 150.851245][ T8121] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.851245][ T8121] [ 150.861002][ T8121] EXT4-fs (loop3): Total free blocks count 0 [ 150.867003][ T8121] EXT4-fs (loop3): Free/Dirty block details [ 150.872888][ T8121] EXT4-fs (loop3): free_blocks=0 [ 150.877848][ T8121] EXT4-fs (loop3): dirty_blocks=0 [ 150.882860][ T8121] EXT4-fs (loop3): Block reservation details [ 150.888865][ T8121] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 150.904065][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.965695][ T7518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.982699][ T8131] loop3: detected capacity change from 0 to 128 [ 151.026893][ T8137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=8137 comm=syz.2.979 [ 151.028956][ T8133] loop0: detected capacity change from 0 to 2048 [ 151.049946][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 151.058923][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.066557][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.075596][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.083047][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.098829][ T8133] Alternate GPT is invalid, using primary GPT. [ 151.105173][ T8133] loop0: p2 p3 p7 [ 151.601421][ T8149] loop2: detected capacity change from 0 to 512 [ 151.603944][ T8148] loop0: detected capacity change from 0 to 2048 [ 151.627680][ T8149] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.634127][ T8156] loop4: detected capacity change from 0 to 164 [ 151.646591][ T8156] syz.4.987: attempt to access beyond end of device [ 151.646591][ T8156] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 151.655847][ T8149] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.984: iget: bad i_size value: -6917529027641081756 [ 151.660701][ T8156] syz.4.987: attempt to access beyond end of device [ 151.660701][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.680858][ T8148] Alternate GPT is invalid, using primary GPT. [ 151.693162][ T8148] loop0: p2 p3 p7 [ 151.695447][ T8156] syz.4.987: attempt to access beyond end of device [ 151.695447][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.697528][ T8149] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.984: couldn't read orphan inode 17 (err -117) [ 151.722677][ T8149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.735415][ T8156] syz.4.987: attempt to access beyond end of device [ 151.735415][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.748981][ T8156] syz.4.987: attempt to access beyond end of device [ 151.748981][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.762515][ T8156] syz.4.987: attempt to access beyond end of device [ 151.762515][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.776215][ T8156] syz.4.987: attempt to access beyond end of device [ 151.776215][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.777592][ T8149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.984: bg 0: block 65: padding at end of block bitmap is not set [ 151.789912][ T8156] syz.4.987: attempt to access beyond end of device [ 151.789912][ T8156] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.817879][ T8149] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.984: Failed to acquire dquot type 0 [ 151.843190][ T7518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.876876][ T8166] loop2: detected capacity change from 0 to 1024 [ 151.895467][ T8166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.953897][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 152.047420][ T8173] loop3: detected capacity change from 0 to 1024 [ 152.102609][ T8173] EXT4-fs: Ignoring removed oldalloc option [ 152.127726][ T8173] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.239305][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.408400][ T8181] pim6reg1: entered promiscuous mode [ 152.413818][ T8181] pim6reg1: entered allmulticast mode [ 152.650025][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.654865][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 152.705947][ T8168] syz.3.990 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 152.716893][ T8168] CPU: 1 UID: 0 PID: 8168 Comm: syz.3.990 Tainted: G W 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 152.728686][ T8168] Tainted: [W]=WARN [ 152.732486][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.742552][ T8168] Call Trace: [ 152.745822][ T8168] [ 152.748742][ T8168] dump_stack_lvl+0xf2/0x150 [ 152.753352][ T8168] dump_stack+0x15/0x20 [ 152.757510][ T8168] dump_header+0x83/0x2d0 [ 152.761856][ T8168] oom_kill_process+0x341/0x4c0 [ 152.766689][ T8168] out_of_memory+0x9af/0xbe0 [ 152.771321][ T8168] ? css_next_descendant_pre+0x11c/0x140 [ 152.776949][ T8168] mem_cgroup_out_of_memory+0x13e/0x190 [ 152.782578][ T8168] try_charge_memcg+0x51b/0x810 [ 152.787423][ T8168] charge_memcg+0x50/0xc0 [ 152.791749][ T8168] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 152.797722][ T8168] __read_swap_cache_async+0x236/0x480 [ 152.803270][ T8168] swap_cluster_readahead+0x276/0x3f0 [ 152.808633][ T8168] swapin_readahead+0xe4/0x6f0 [ 152.813384][ T8168] ? __filemap_get_folio+0x420/0x5b0 [ 152.818710][ T8168] ? swap_cache_get_folio+0x77/0x210 [ 152.824125][ T8168] do_swap_page+0x2af/0x23e0 [ 152.828800][ T8168] ? __rcu_read_lock+0x36/0x50 [ 152.833585][ T8168] ? pte_offset_map_nolock+0x124/0x1d0 [ 152.839089][ T8168] handle_mm_fault+0x8c5/0x2a80 [ 152.843949][ T8168] exc_page_fault+0x3b9/0x650 [ 152.848732][ T8168] asm_exc_page_fault+0x26/0x30 [ 152.853992][ T8168] RIP: 0033:0x7f7a483200b4 [ 152.858407][ T8168] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d 9e c4 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 c6 57 ff ff [ 152.878214][ T8168] RSP: 002b:00007ffcadcf55f0 EFLAGS: 00010206 [ 152.884336][ T8168] RAX: 00000000fffffffa RBX: 00007f7a484a5f80 RCX: 0000000000000000 [ 152.892415][ T8168] RDX: 00007ffcadcf5630 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.900460][ T8168] RBP: 00007f7a484a7a80 R08: 0000000025ccfd69 R09: 7fffffffffffffff [ 152.908457][ T8168] R10: 0000000000000000 R11: 00007f7a48fe7080 R12: 00000000000254a5 [ 152.916427][ T8168] R13: 00007ffcadcf5760 R14: 0000000000000032 R15: ffffffffffffffff [ 152.924388][ T8168] [ 152.928059][ T8168] memory: usage 307200kB, limit 307200kB, failcnt 170 [ 152.928872][ T7518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.935049][ T8168] memory+swap: usage 308068kB, limit 9007199254740988kB, failcnt 0 [ 152.951886][ T8168] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 152.959196][ T8168] Memory cgroup stats for /syz3: [ 152.961248][ T8168] cache 114688 [ 152.969694][ T8168] rss 0 [ 152.972452][ T8168] shmem 0 [ 152.972908][ T8196] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 152.975433][ T8168] mapped_file 90112 [ 152.987514][ T8168] dirty 110592 [ 152.990933][ T8168] writeback 0 [ 152.994237][ T8168] workingset_refault_anon 682 [ 152.998974][ T8168] workingset_refault_file 0 [ 153.003465][ T8168] swap 888832 [ 153.006905][ T8168] swapcached 12288 [ 153.010776][ T8168] pgpgin 98547 [ 153.014148][ T8168] pgpgout 98515 [ 153.017615][ T8168] pgfault 108761 [ 153.021155][ T8168] pgmajfault 121 [ 153.024707][ T8168] inactive_anon 0 [ 153.028394][ T8168] active_anon 12288 [ 153.032190][ T8168] inactive_file 0 [ 153.035824][ T8168] active_file 118784 [ 153.039785][ T8168] unevictable 0 [ 153.043302][ T8168] hierarchical_memory_limit 314572800 [ 153.048776][ T8168] hierarchical_memsw_limit 9223372036854771712 [ 153.054941][ T8168] total_cache 114688 [ 153.058895][ T8168] total_rss 0 [ 153.062224][ T8168] total_shmem 0 [ 153.065784][ T8168] total_mapped_file 90112 [ 153.070228][ T8168] total_dirty 110592 [ 153.074101][ T8168] total_writeback 0 [ 153.078055][ T8168] total_workingset_refault_anon 682 [ 153.083231][ T8168] total_workingset_refault_file 0 [ 153.088270][ T8168] total_swap 888832 [ 153.092087][ T8168] total_swapcached 12288 [ 153.096524][ T8168] total_pgpgin 98548 [ 153.100403][ T8168] total_pgpgout 98516 [ 153.104420][ T8168] total_pgfault 108762 [ 153.108495][ T8168] total_pgmajfault 121 [ 153.112596][ T8168] total_inactive_anon 0 [ 153.116766][ T8168] total_active_anon 12288 [ 153.121184][ T8168] total_inactive_file 0 [ 153.125355][ T8168] total_active_file 118784 [ 153.129760][ T8168] total_unevictable 0 [ 153.133788][ T8168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.990,pid=8168,uid=0 [ 153.148410][ T8168] Memory cgroup out of memory: Killed process 8168 (syz.3.990) total-vm:87116kB, anon-rss:612kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 153.264997][ T8173] syz.3.990 (8173) used greatest stack depth: 9016 bytes left [ 153.342166][ T8208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.405313][ T8169] syz.3.990 (8169) used greatest stack depth: 7288 bytes left [ 153.418251][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.294687][ T8229] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 154.342780][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1016'. [ 154.367994][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.414825][ T8244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1018'. [ 154.537321][ T8258] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.541998][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1026'. [ 154.569281][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 154.573200][ T8265] loop1: detected capacity change from 0 to 256 [ 154.578334][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 154.662769][ T8276] capability: warning: `syz.0.1033' uses 32-bit capabilities (legacy support in use) [ 154.698789][ T8280] loop1: detected capacity change from 0 to 512 [ 154.705366][ T8280] EXT4-fs: Ignoring removed bh option [ 154.712025][ T8280] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.1035: invalid block [ 154.724065][ T8280] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1035: couldn't read orphan inode 15 (err -117) [ 154.737748][ T8280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.762661][ T7843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.801926][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 154.801940][ T29] audit: type=1326 audit(1727466734.216:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a482e4fa7 code=0x7ffc0000 [ 154.832289][ T29] audit: type=1326 audit(1727466734.246:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a48289959 code=0x7ffc0000 [ 154.855807][ T29] audit: type=1326 audit(1727466734.246:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a482e4fa7 code=0x7ffc0000 [ 154.879270][ T29] audit: type=1326 audit(1727466734.246:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a48289959 code=0x7ffc0000 [ 154.902589][ T29] audit: type=1326 audit(1727466734.246:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 154.926282][ T29] audit: type=1326 audit(1727466734.246:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a482e4fa7 code=0x7ffc0000 [ 154.949589][ T29] audit: type=1326 audit(1727466734.246:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a48289959 code=0x7ffc0000 [ 154.972880][ T29] audit: type=1326 audit(1727466734.246:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7a482edff9 code=0x7ffc0000 [ 154.998950][ T29] audit: type=1326 audit(1727466734.286:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a482e4fa7 code=0x7ffc0000 [ 155.022444][ T29] audit: type=1326 audit(1727466734.286:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a48289959 code=0x7ffc0000 [ 155.191962][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1038'. [ 155.311267][ T8290] loop4: detected capacity change from 0 to 2048 [ 155.359100][ T8290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.432769][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.440852][ T8301] syz.2.1043[8301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.441802][ T8301] syz.2.1043[8301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.455394][ T8301] syz.2.1043[8301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.469187][ T8301] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1043'. [ 155.488137][ T8305] loop4: detected capacity change from 0 to 2048 [ 155.489821][ T8301] unsupported nlmsg_type 40 [ 155.510382][ T8305] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1042: bad orphan inode 8192 [ 155.530325][ T8305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.546184][ T8313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1046'. [ 155.549921][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 155.564148][ T8305] bridge_slave_1: left allmulticast mode [ 155.569978][ T8305] bridge_slave_1: left promiscuous mode [ 155.575766][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.583382][ T8305] bridge_slave_0: left allmulticast mode [ 155.589121][ T8305] bridge_slave_0: left promiscuous mode [ 155.594748][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.656945][ T8317] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1046'. [ 155.657736][ T8316] loop1: detected capacity change from 0 to 128 [ 155.690329][ T8316] bio_check_eod: 9968 callbacks suppressed [ 155.690342][ T8316] syz.1.1047: attempt to access beyond end of device [ 155.690342][ T8316] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 155.717544][ T8315] syz.1.1047: attempt to access beyond end of device [ 155.717544][ T8315] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 155.732132][ T7639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.732427][ T8316] syz.1.1047: attempt to access beyond end of device [ 155.732427][ T8316] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 155.742844][ T8320] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 155.755367][ T8316] syz.1.1047: attempt to access beyond end of device [ 155.755367][ T8316] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 155.762138][ T8320] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 156.146122][ T8344] loop1: detected capacity change from 0 to 1024 [ 156.162641][ T8346] pim6reg1: entered promiscuous mode [ 156.168013][ T8346] pim6reg1: entered allmulticast mode [ 156.177248][ T8344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.378543][ T8351] loop2: detected capacity change from 0 to 512 [ 156.385539][ T8351] EXT4-fs: Ignoring removed orlov option [ 156.391364][ T8351] ext4: Bad value for 'sb' [ 156.724801][ T8344] ================================================================== [ 156.732905][ T8344] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 156.741237][ T8344] [ 156.743571][ T8344] write to 0xffff888106c7539c of 4 bytes by task 8349 on cpu 1: [ 156.751201][ T8344] inode_update_timestamps+0x166/0x280 [ 156.756668][ T8344] file_modified_flags+0x298/0x330 [ 156.761801][ T8344] file_modified+0x17/0x20 [ 156.766217][ T8344] ext4_buffered_write_iter+0x1cc/0x370 [ 156.771769][ T8344] ext4_file_write_iter+0x293/0xe10 [ 156.776982][ T8344] iter_file_splice_write+0x5f1/0x980 [ 156.782362][ T8344] direct_splice_actor+0x160/0x2c0 [ 156.787481][ T8344] splice_direct_to_actor+0x302/0x670 [ 156.792865][ T8344] do_splice_direct+0xd7/0x150 [ 156.797639][ T8344] do_sendfile+0x39b/0x970 [ 156.802058][ T8344] __x64_sys_sendfile64+0x110/0x150 [ 156.807253][ T8344] x64_sys_call+0xed5/0x2d60 [ 156.811854][ T8344] do_syscall_64+0xc9/0x1c0 [ 156.816454][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.822378][ T8344] [ 156.824701][ T8344] read to 0xffff888106c7539c of 4 bytes by task 8344 on cpu 0: [ 156.832235][ T8344] atime_needs_update+0x2aa/0x3e0 [ 156.837260][ T8344] touch_atime+0x4a/0x350 [ 156.841593][ T8344] filemap_splice_read+0x8a5/0x910 [ 156.846813][ T8344] ext4_file_splice_read+0x8f/0xb0 [ 156.852025][ T8344] splice_direct_to_actor+0x269/0x670 [ 156.857400][ T8344] do_splice_direct+0xd7/0x150 [ 156.862171][ T8344] do_sendfile+0x39b/0x970 [ 156.866597][ T8344] __x64_sys_sendfile64+0x110/0x150 [ 156.871801][ T8344] x64_sys_call+0xed5/0x2d60 [ 156.876411][ T8344] do_syscall_64+0xc9/0x1c0 [ 156.880910][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.886819][ T8344] [ 156.889142][ T8344] value changed: 0x082687c8 -> 0x08bf1e48 [ 156.894848][ T8344] [ 156.897164][ T8344] Reported by Kernel Concurrency Sanitizer on: [ 156.903310][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.1.1057 Tainted: G W 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 156.915120][ T8344] Tainted: [W]=WARN [ 156.919010][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.929125][ T8344] ================================================================== [ 157.031560][ T7843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.