last executing test programs: 18.57716817s ago: executing program 1 (id=8227): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x270980, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632f77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x3f, 0x29, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee", 0x0, 0x3}, 0x50) 18.421271974s ago: executing program 1 (id=8228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) 17.522325373s ago: executing program 1 (id=8242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) 17.448748389s ago: executing program 1 (id=8244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000940)=@phonet, 0x80, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000001080)=""/216, 0xd8}], 0x4, &(0x7f0000000e00)=""/212, 0xd4}, 0x3}], 0x1, 0x141, &(0x7f0000000f40)) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESHEX=r7, @ANYRES64, @ANYRES8=r1, @ANYRES64=r3, @ANYRES32, @ANYRES32=r6, @ANYRESHEX=r0], 0xffe6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000040), 0x12) r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600) sendfile(0xffffffffffffffff, r10, 0x0, 0xe065) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) 13.55963922s ago: executing program 1 (id=8282): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}]) 13.414437353s ago: executing program 1 (id=8284): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x6, 0x8, 0x0, 0x3341, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ptrace(0x10, 0x1) 2.766317827s ago: executing program 3 (id=8363): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)="b7", 0x1}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/27, 0x1001}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 2.687441664s ago: executing program 4 (id=8364): syz_open_dev$evdev(0x0, 0x0, 0x802) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x44}}, 0x0) 2.687077045s ago: executing program 3 (id=8365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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") 2.531282388s ago: executing program 4 (id=8366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)) 2.528804069s ago: executing program 3 (id=8368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000000c001a8008"], 0x2c}}, 0x0) 2.344833574s ago: executing program 0 (id=8369): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}]) 2.210662736s ago: executing program 3 (id=8370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd9d}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 2.096736066s ago: executing program 3 (id=8371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='ext4_error\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000a00)={[{@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400}}, {}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) 1.854907647s ago: executing program 3 (id=8372): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x6, 0x8, 0x0, 0x3341, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ptrace(0x10, 0x1) 1.791176493s ago: executing program 0 (id=8373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000940)={[{@nodiscard}, {}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0x5, 0x588, &(0x7f0000001900)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 1.618098488s ago: executing program 4 (id=8374): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.530059416s ago: executing program 4 (id=8375): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}]) 1.458892502s ago: executing program 2 (id=8376): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2008800, &(0x7f00000020c0)={[{}, {@usrjquota}, {@abort}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}]}, 0x1, 0x641, &(0x7f00000003c0)="$eJzs3d9rFNsdAPDvbDa/2yZKaWsfaqAUhdbERC1SCtV3EfvjrX1JTRRrNGJS2ohgBAul0Lc+CH3qQ+2fUcFX/4E+FNo+lQtyudeH60Wue5nJzmbczCabbDYbN58PjDlnJjvnTMw358zZc2YDOLKmImI6Ik5ExL0kYqJwrJr9W8m+Kf2+1588vJ5uSdRqP/84iYePkvXiuZL61/H6i7+Y2Nh1fGBruStrD27PLy0t3q/nZ1bv3JtZWXtw5tad+ZuLNxfvzv1w7uKF8xcuzp7t5PL+WMxcefKb30386eov//7Xt8nsP/59NYlL6dVl0utqfvFwJyVnP9upqG14U9yf/lwvdnjuw+Kzifz3ZFPSvINDLY2BwYj4ZkzEQOF/cyL+8NOeVgzoqloSeRsFHDnJnuJ/ZP8rAhywvB+Q39uX3QeXKLmjBz40ry5vDEhtxP5gROTxX83G/CJGsrGBsdfJe+M8SUR0NDJXl5bx8sXVJ+kWLcbhgO5Yf5yPcje3/0kWm5MxkuXGXlfei/9KYUv3/2w3hQ5tJqeaDm2N/9GyM4zspjig3PrjiPhWvf0fit3EfzUK8f/rPZa/c/wDAAAAAAAA7Xp+OSJ+UDb/r9KY/zNUMv9nPCIu7UP5O7//V8mX6CX7UBxQ8OpyxI9L5//mYReTA/XcV7P5AIPJjVtLi2cj4msRcToGh9P8bNN5K4X0mT8ff9qq/OL8v3RLy3/5oji9uPJRtWkh7sL86ry/BtC5V48jvp3N/z1Z3/P+/J+0/U9K2v80vu+1Wcbx7z27VszXarVHebo8/jfmAgPdVftbxKnS9n+zgU22fz7HTNYfmMl7BVt9521hoVET8Q+9k7b/Y63jv9HzbjyvZ2V35x+KiHNr1Vbh30b8l/f/h5JfDERhKcHv51dX789GDCVXtu6f212doV/l8ZDHSxr/p7+7/fhfo/9fiMPRiFhvs8xvvBv/X6tj2n/onTT+F7bv/08m9fY/sva/0RFoOzH3bPKf2ZlKngt3ra32/3zWpp+u78nG/4C6ypY97QZoT6oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+4SkR8JZLKdCNdqUxPR4xHxNdjrLK0vLL6/RvLv727kB7LPv+/kn/S78RGPsk//3+ykJ9ryp+LiGMR8ZeB0Sw/fX15aaHXFw8AAAAAAAAAAAAAAAAAAACHxHi25r823Lz+P/X/gV7XDui6av3rDvE+chB1AQ5Wdc+vrA1v3fffzioDHKi9xz/woWs//ge7Wg/g4LWO/zdva5k8nyTFo592uV5A9+n/w9G1x/j39iD0gZL4n+pFPYCDtu2Y3tNGyrv/0Jfc/wMAAAAAQF85dvL5v5KIWP/RaLalhurHTPaH/lbpdQWAnjGHF46u6nKvawD0int8YHNd/+e1suOtZ/8n3akQAAAAAAAAAAAAALDFqRPW/8NRtf36f3P7oZ9ts/6/LPg9LgD6SOuP/tD2Q79zjw/s1Npb/w8AAAAAAAAAAAAAh8DIg9vzS0uL91fWOkxExH9qSUSn52mR+FXJoZ90qayuJtbnD0U19jXxrjtnHoyIw3GBB53IH8HRw2r0+O8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ8GUAAAD//2OSKo4=") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1.191859246s ago: executing program 4 (id=8377): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)="b7", 0x1}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/27, 0x1001}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 1.063226437s ago: executing program 4 (id=8378): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) clock_gettime(0x0, &(0x7f0000000f00)) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000940)=@phonet, 0x80, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000001080)=""/216, 0xd8}], 0x4, &(0x7f0000000e00)=""/212, 0xd4}, 0x3}], 0x1, 0x141, &(0x7f0000000f40)) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0xffe6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000040), 0x12) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600) sendfile(0xffffffffffffffff, r4, 0x0, 0xe065) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) 563.385151ms ago: executing program 2 (id=8379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$eJzs3M9vFFUcAPDvTH8gP1sVURC0ikbij5YWVA5eNJp40MRED3isbUFkoYbWRAiRagweDYl349HEv8CbF6MejIk3o4lHQ0KUmICe1swv2C67pZRtF9nPJxn2vZm3+953Z97M23lMA+hZI9k/ScSmiPg1IoaK7OICI8XL5Yunp/65eHoqiXr99T+TvNyli6enqqLV+zaWmT1pRPpxUlay2NzJU0cna7WZE2V+bL5+Zmzu5KmnjhybPDxzeOb4xIED+/eNP/vMxNMdiTOL69KOD2Z3bn/5zXOvTh0899b3X2Xt3bar2N4YR6eMZIH/Vc81b3u005V12eaGdNLfxYZwQ/oiIttdA3n/H4q+uLrzhuKlj7raOGBVZdemde03L9SB21gS3W4B0B3VhT77/VstazT0uCVceD5i6pci/svlUmzpj7QsM7CK9Y9ExMGFfz/Pllil+xAAAI3ysc2TrcZ/aWzLX4tZnS3lHMpwRNwZEXdFxN0RsTUi7onIy94bEfcVb64PLbP+5qmha8c/6fmbCvA6svHfc+XcVrUsFPWW1cdwX5nbnMc/kBw6UpvZW34ne2JgXZYfX6KOb178+dPmdevL18bxX7Zk9VdjwdL5/qYbdNOT85OdGpRe+DBiR//i+IstyZWZgOwI2B4RO27so7dUiSOPf7mzXaFlxN9eB+aZ6l9EPFbs/4Voir+S5POTx95tMz85dkfUZvaOVUfFtX746exr7eq/qfg7INv/GxYf/00lhv5OivnagajVZk7M3XgdZ3/7pO1vmuvHn7Y8/geTN/I56x/fLta9Pzk/f2I8YjB5Jc8PRsP6iavvrfJV+Sz+PbtbHf9pfo6Lcv/fHxHZQbwrIh6IiAfLtj8UEQ9HxO4l4v/uhUfeWXn8qyuLfzpa9//ScNI4Xz938lT13V5ds3Si7+i3Xydt6l/e/t8fC/m5tpCf/65jOe1a2dEMAAAA/z9pRGyKJB29kk7T0dHi//BvjQ1pbXZu/olDs+8dny6eERiOgbS60zXUcD90PFkoP7HIT5T3iqvt+8r7xp/1rc/zo1Oztekuxw69bmOb/p/5o6/brQNWnee1oHc19/+0S+0A1p7rP/SuFv1/fTfaAaw913/oXa36/5mmvLkAuD1d2/9/b/En6yqDq90cYA0Z/0Pv0v+hd+n/0JMWPRJ/fPNyH5uX6PlEpLdEMyRWmsgu+0uU6faZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CwAA//9RG/CH") 376.155827ms ago: executing program 2 (id=8380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000110001000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a8008"], 0x2c}}, 0x0) 315.272552ms ago: executing program 0 (id=8381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='ext4_error\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000a00)={[{@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400}}, {}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/247, 0xf7) 252.476618ms ago: executing program 2 (id=8382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}]) 176.556534ms ago: executing program 0 (id=8383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 35.506607ms ago: executing program 2 (id=8384): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) 34.958057ms ago: executing program 0 (id=8385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) 7.83236ms ago: executing program 2 (id=8386): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0xee00, 0xee01, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0xffffff41, 0x9c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x2, 0x4, 0x4, 0x2, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x10003, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc9b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f000010000000000000965ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e957138f3fc06344846c33db867bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db39de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b0bc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000002558e0a2db3b207ef44560820814729717ba952825b2f09f115f7248b295f790ef8fce7af7ed792ca25c03ae3ed6473c093be648d5476b3a15f2eb2badaef4a7b58b6f5fc01e9083b900d635fadbd1c867280682eb2093a614dc2b3d5da9f14d3b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000000)={0x83}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x4c, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) read(r8, &(0x7f0000000140)=""/173, 0xad) readv(r8, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r7, &(0x7f00000001c0)=ANY=[], 0x10034) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="00000007d937990000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b70800000fb58a0000000000b350c4effbd45a060000000007010000f8ffffffbfa400000000000007040012f0ffffffb702000008000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xd51, 0x9b, &(0x7f0000000440)=""/155, 0x100, 0x4, '\x00', 0x0, 0x1e, r1, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0xfff}, 0x10, 0x0, r3, 0x6, &(0x7f0000000500)=[r11], &(0x7f00000007c0)=[{0x5, 0x1, 0x7, 0xb}, {0x1, 0x4, 0x9, 0x4}, {0x1, 0x1, 0x1, 0xa}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x4, 0x1, 0x4}], 0x10, 0x8, @void, @value}, 0x90) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r12, &(0x7f00000002c0)='environ\x00') unlink(&(0x7f0000000640)='./file0\x00') splice(r3, 0x0, r2, 0x0, 0x6, 0x0) 0s ago: executing program 0 (id=8387): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000140000001100010000000000000000000000000a105ece9fd04fcb97be6bc0f99e807f599b1747f20b29e99ac660cc642e4f2a26ab48f23da703f60cc9a48efd386923a49e90c724a19885f8458b2d4ac51c8003dec7199394bf1afb0f8c0e42789b28a56299c76b810695ee5a3536bbe01c"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a62cd6234abc3158c579006c7e8e3f1fc2fa087128310304a164d1bdd3e0d2b0d55b4bd35ad300a5a9a40745834a883705c3fc12ee63c9faf9b78995420334b58664dc901fbbc9833d5e3bf48942e8885278691efaee57af160874c7233d91539f33382aa7e37567b1da3ecf4b012"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): type 4 has an invalid length. [ 989.968640][T28413] loop0: detected capacity change from 0 to 512 [ 989.995537][T28413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 990.038986][T28413] EXT4-fs (loop0): 1 orphan inode deleted [ 990.044837][T28413] EXT4-fs (loop0): 1 truncate cleaned up [ 990.062720][T28413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.116564][T28425] netlink: 'syz.3.7347': attribute type 4 has an invalid length. [ 990.295359][T22808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.789512][T23988] usb 7-1: enqueue for inactive port 0 [ 990.828749][T23988] usb 7-1: enqueue for inactive port 0 [ 991.104941][T28439] loop0: detected capacity change from 0 to 128 [ 991.325013][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7352'. [ 991.387187][T23988] vhci_hcd: vhci_device speed not set [ 991.729607][T28458] netlink: 'syz.1.7358': attribute type 4 has an invalid length. [ 991.776381][T28462] loop0: detected capacity change from 0 to 512 [ 991.809625][T28462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 991.827893][T28461] loop4: detected capacity change from 0 to 2048 [ 991.843811][T28462] EXT4-fs (loop0): 1 orphan inode deleted [ 991.849686][T28462] EXT4-fs (loop0): 1 truncate cleaned up [ 991.871766][T28461] Alternate GPT is invalid, using primary GPT. [ 991.878187][T28461] loop4: p1 p2 p3 [ 991.886954][T28462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.220412][T28480] netlink: 'syz.2.7365': attribute type 10 has an invalid length. [ 992.237603][T28480] team0: Cannot enslave team device to itself [ 992.291848][T28483] loop2: detected capacity change from 0 to 128 [ 992.479745][T22808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.673259][T28489] loop0: detected capacity change from 0 to 1024 [ 992.682184][T28489] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 992.827250][T28492] loop2: detected capacity change from 0 to 1024 [ 992.853296][T28492] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 992.861582][T28492] System zones: 0-1, 3-36 [ 992.870774][T28492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.912606][T28492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.312296][T28504] netlink: 'syz.1.7371': attribute type 4 has an invalid length. [ 993.711617][T28511] loop4: detected capacity change from 0 to 128 [ 994.588051][T28524] loop4: detected capacity change from 0 to 512 [ 994.624474][T28524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 994.767464][T28524] EXT4-fs (loop4): 1 orphan inode deleted [ 994.773405][T28524] EXT4-fs (loop4): 1 truncate cleaned up [ 994.780769][T28524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.107031][T26044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.174811][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7382'. [ 995.207891][T28548] netlink: 'syz.4.7385': attribute type 10 has an invalid length. [ 995.234295][T28548] team0: Cannot enslave team device to itself [ 995.282562][T28551] loop4: detected capacity change from 0 to 128 [ 995.349657][T28555] loop4: detected capacity change from 0 to 128 [ 995.409853][T28558] loop4: detected capacity change from 0 to 1024 [ 995.416800][T28558] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 995.547312][T28563] netlink: 'syz.3.7391': attribute type 10 has an invalid length. [ 995.567437][T28563] bond0: (slave team0): Releasing backup interface [ 995.574924][T28563] team0: left promiscuous mode [ 995.579999][T28563] team_slave_0: left promiscuous mode [ 995.585716][T28563] team_slave_1: left promiscuous mode [ 995.592186][T28563] team0: Cannot enslave team device to itself [ 995.793944][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7395'. [ 996.128175][T28585] random: crng reseeded on system resumption [ 996.992988][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7406'. [ 997.185352][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 997.185369][ T29] audit: type=1326 audit(1725952841.844:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.224307][T28624] loop3: detected capacity change from 0 to 1024 [ 997.231780][T28624] EXT4-fs: Ignoring removed orlov option [ 997.241998][T28624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 997.247599][ T29] audit: type=1326 audit(1725952841.874:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.254382][T28627] loop2: detected capacity change from 0 to 1024 [ 997.272491][ T29] audit: type=1326 audit(1725952841.874:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.298295][T28627] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 997.305046][ T29] audit: type=1326 audit(1725952841.874:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.338623][ T29] audit: type=1326 audit(1725952841.874:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.352604][T28624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 997.365796][ T29] audit: type=1326 audit(1725952841.874:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.373325][T28624] System zones: 0-1, 3-12 [ 997.396818][ T29] audit: type=1326 audit(1725952841.874:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.401844][T28624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.424699][ T29] audit: type=1326 audit(1725952841.874:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.460669][ T29] audit: type=1326 audit(1725952841.874:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.484878][ T29] audit: type=1326 audit(1725952841.874:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28623 comm="syz.3.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf1350def9 code=0x7ffc0000 [ 997.945800][T28636] netlink: 'syz.1.7414': attribute type 4 has an invalid length. [ 998.045529][T20286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.049910][T28661] loop2: detected capacity change from 0 to 1024 [ 999.072387][T28661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 999.080884][T28661] System zones: 0-1, 3-36 [ 999.089590][T28661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.107937][T28661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.137459][T28663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 999.257605][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7423'. [ 999.484249][T28679] loop0: detected capacity change from 0 to 1024 [ 999.498326][T28679] EXT4-fs: Ignoring removed orlov option [ 999.504169][T28679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 999.552455][T28679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 999.569998][T28679] System zones: 0-1, 3-12 [ 999.580792][T28679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.392977][T28694] loop2: detected capacity change from 0 to 128 [ 1000.405780][T22808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.503055][T28697] syz.2.7431: attempt to access beyond end of device [ 1000.503055][T28697] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1000.546528][T28696] loop3: detected capacity change from 0 to 2048 [ 1000.580404][T28701] netlink: 'syz.0.7432': attribute type 4 has an invalid length. [ 1000.580672][T28696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.698268][T28709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1000.835865][T28716] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1000.874457][T28716] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1000.887159][T28716] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1000.887159][T28716] [ 1000.897728][T28716] EXT4-fs (loop3): Total free blocks count 0 [ 1000.903835][T28716] EXT4-fs (loop3): Free/Dirty block details [ 1000.909948][T28716] EXT4-fs (loop3): free_blocks=2415919104 [ 1000.915695][T28716] EXT4-fs (loop3): dirty_blocks=64 [ 1000.921010][T28716] EXT4-fs (loop3): Block reservation details [ 1000.927090][T28716] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1001.825394][T28736] loop4: detected capacity change from 0 to 128 [ 1001.995273][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1002.175464][T28747] loop3: detected capacity change from 0 to 128 [ 1002.361750][T28747] syz.3.7445: attempt to access beyond end of device [ 1002.361750][T28747] loop3: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 1002.441551][T28754] netlink: 'syz.1.7448': attribute type 4 has an invalid length. [ 1002.452322][T28751] syz.3.7445: attempt to access beyond end of device [ 1002.452322][T28751] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1002.871215][T28770] loop2: detected capacity change from 0 to 128 [ 1002.974633][T28775] loop0: detected capacity change from 0 to 2048 [ 1002.984115][T28770] syz.2.7455: attempt to access beyond end of device [ 1002.984115][T28770] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1003.007131][T28775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.286918][T28789] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1003.315691][T28775] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1003.401817][T28775] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1003.414340][T28775] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1003.414340][T28775] [ 1003.424095][T28775] EXT4-fs (loop0): Total free blocks count 0 [ 1003.430265][T28775] EXT4-fs (loop0): Free/Dirty block details [ 1003.436179][T28775] EXT4-fs (loop0): free_blocks=2415919104 [ 1003.441965][T28775] EXT4-fs (loop0): dirty_blocks=64 [ 1003.447193][T28775] EXT4-fs (loop0): Block reservation details [ 1003.453396][T28775] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 1003.581694][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1004.320760][T28815] loop4: detected capacity change from 0 to 128 [ 1004.674934][T28828] loop2: detected capacity change from 0 to 2048 [ 1004.704882][T28830] loop3: detected capacity change from 0 to 128 [ 1004.878283][T28828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.192324][T28845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1005.207516][T28845] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1005.219978][T28845] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1005.219978][T28845] [ 1005.229742][T28845] EXT4-fs (loop2): Total free blocks count 0 [ 1005.236117][T28845] EXT4-fs (loop2): Free/Dirty block details [ 1005.242251][T28845] EXT4-fs (loop2): free_blocks=2415919104 [ 1005.248146][T28845] EXT4-fs (loop2): dirty_blocks=64 [ 1005.253274][T28845] EXT4-fs (loop2): Block reservation details [ 1005.259282][T28845] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1005.299277][T28847] loop4: detected capacity change from 0 to 2048 [ 1005.310314][T28847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.490587][T28856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7479'. [ 1005.527229][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1005.569206][T28847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1005.604659][T28847] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1005.617061][T28847] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1005.617061][T28847] [ 1005.626820][T28847] EXT4-fs (loop4): Total free blocks count 0 [ 1005.632939][T28847] EXT4-fs (loop4): Free/Dirty block details [ 1005.639150][T28847] EXT4-fs (loop4): free_blocks=2415919104 [ 1005.644946][T28847] EXT4-fs (loop4): dirty_blocks=64 [ 1005.650148][T28847] EXT4-fs (loop4): Block reservation details [ 1005.656348][T28847] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1005.662540][ T3350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1005.690813][T28861] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1005.744402][T28863] loop2: detected capacity change from 0 to 2048 [ 1005.780425][ T3350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1005.812155][T28865] loop4: detected capacity change from 0 to 1024 [ 1005.834862][T28867] loop3: detected capacity change from 0 to 512 [ 1005.841447][T28865] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1005.842404][T28863] Alternate GPT is invalid, using primary GPT. [ 1005.855960][T28863] loop2: p1 p2 p3 [ 1005.861534][T28867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1005.883030][T28867] EXT4-fs (loop3): 1 orphan inode deleted [ 1005.888923][T28867] EXT4-fs (loop3): 1 truncate cleaned up [ 1005.932767][T28867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.150048][T20286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.816699][T28897] loop0: detected capacity change from 0 to 2048 [ 1006.885623][T28897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.413891][T28909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1007.428979][T28909] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1007.441648][T28909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1007.441648][T28909] [ 1007.451500][T28909] EXT4-fs (loop0): Total free blocks count 0 [ 1007.457506][T28909] EXT4-fs (loop0): Free/Dirty block details [ 1007.463918][T28909] EXT4-fs (loop0): free_blocks=2415919104 [ 1007.469707][T28909] EXT4-fs (loop0): dirty_blocks=64 [ 1007.474833][T28909] EXT4-fs (loop0): Block reservation details [ 1007.480895][T28909] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 1007.922634][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1007.932421][T28914] loop3: detected capacity change from 0 to 2048 [ 1007.988946][T28914] Alternate GPT is invalid, using primary GPT. [ 1007.993072][T28920] loop0: detected capacity change from 0 to 512 [ 1007.995267][T28914] loop3: p1 p2 p3 [ 1008.002973][T28920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1008.017403][T28920] EXT4-fs (loop0): 1 orphan inode deleted [ 1008.023302][T28920] EXT4-fs (loop0): 1 truncate cleaned up [ 1008.031807][T28920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.216705][T28932] random: crng reseeded on system resumption [ 1008.397615][T28937] loop4: detected capacity change from 0 to 1024 [ 1008.412174][T28939] random: crng reseeded on system resumption [ 1008.412338][T28937] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1008.493642][T22808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.687521][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 1008.687539][ T29] audit: type=1400 audit(1725952853.344:11043): avc: denied { bind } for pid=28944 comm="syz.2.7507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1008.733780][T28945] loop2: detected capacity change from 0 to 512 [ 1009.149918][T28958] loop2: detected capacity change from 0 to 1024 [ 1009.178037][T28958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1009.192247][T28958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1009.207748][T28958] System zones: 0-1, 3-12 [ 1009.226736][T28958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.470532][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.497149][T25395] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.574570][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.681961][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.745427][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.861813][ T55] bridge_slave_1: left allmulticast mode [ 1020.867499][ T55] bridge_slave_1: left promiscuous mode [ 1020.873278][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.881163][ T55] bridge_slave_0: left allmulticast mode [ 1020.887113][ T55] bridge_slave_0: left promiscuous mode [ 1020.892877][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.000815][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.011442][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.021616][ T55] bond0 (unregistering): Released all slaves [ 1021.071969][ T55] tipc: Left network mode [ 1021.127085][ T55] hsr_slave_0: left promiscuous mode [ 1021.133097][ T55] hsr_slave_1: left promiscuous mode [ 1021.139046][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.146525][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.154420][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.161866][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.171343][ T55] veth1_macvtap: left promiscuous mode [ 1021.176824][ T55] veth0_macvtap: left promiscuous mode [ 1021.182394][ T55] veth1_vlan: left promiscuous mode [ 1021.187589][ T55] veth0_vlan: left promiscuous mode [ 1021.259727][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1021.270706][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1021.319297][T28980] chnl_net:caif_netlink_parms(): no params data found [ 1021.407075][T28980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.414355][T28980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.421604][T28980] bridge_slave_0: entered allmulticast mode [ 1021.428577][T28980] bridge_slave_0: entered promiscuous mode [ 1021.435360][T28980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.442510][T28980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.449678][T28980] bridge_slave_1: entered allmulticast mode [ 1021.456285][T28980] bridge_slave_1: entered promiscuous mode [ 1021.462803][T28974] chnl_net:caif_netlink_parms(): no params data found [ 1021.492985][T28987] chnl_net:caif_netlink_parms(): no params data found [ 1021.534889][T28976] chnl_net:caif_netlink_parms(): no params data found [ 1021.556079][T28980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.584199][T28980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.596329][T28978] chnl_net:caif_netlink_parms(): no params data found [ 1021.650163][T28974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.657264][T28974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.664655][T28974] bridge_slave_0: entered allmulticast mode [ 1021.671209][T28974] bridge_slave_0: entered promiscuous mode [ 1021.678102][T28974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.685369][T28974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.692784][T28974] bridge_slave_1: entered allmulticast mode [ 1021.699441][T28974] bridge_slave_1: entered promiscuous mode [ 1021.711231][T28987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.718497][T28987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.726018][T28987] bridge_slave_0: entered allmulticast mode [ 1021.732625][T28987] bridge_slave_0: entered promiscuous mode [ 1021.757534][T28980] team0: Port device team_slave_0 added [ 1021.764285][T28980] team0: Port device team_slave_1 added [ 1021.770294][T28987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.777567][T28987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.787090][T28987] bridge_slave_1: entered allmulticast mode [ 1021.793911][T28987] bridge_slave_1: entered promiscuous mode [ 1021.814503][T28976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.821833][T28976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.829050][T28976] bridge_slave_0: entered allmulticast mode [ 1021.835422][T28976] bridge_slave_0: entered promiscuous mode [ 1021.867266][T28978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.874437][T28978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.882195][T28978] bridge_slave_0: entered allmulticast mode [ 1021.888994][T28978] bridge_slave_0: entered promiscuous mode [ 1021.895661][T28976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.902761][T28976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.910087][T28976] bridge_slave_1: entered allmulticast mode [ 1021.916614][T28976] bridge_slave_1: entered promiscuous mode [ 1021.924513][T28974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.938979][T28980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.946067][T28980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.972389][T28980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.985076][T28987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.995673][T28987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.005020][T28978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.012349][T28978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.019982][T28978] bridge_slave_1: entered allmulticast mode [ 1022.026376][T28978] bridge_slave_1: entered promiscuous mode [ 1022.043775][T28974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.053314][T28980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.060296][T28980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.086505][T28980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.112439][T28987] team0: Port device team_slave_0 added [ 1022.131412][T28976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.153073][T28987] team0: Port device team_slave_1 added [ 1022.165684][T28978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.176422][T28976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.186840][T28978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.196668][T28974] team0: Port device team_slave_0 added [ 1022.203464][T28974] team0: Port device team_slave_1 added [ 1022.225851][T28987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.233208][T28987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.259424][T28987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.298339][T28980] hsr_slave_0: entered promiscuous mode [ 1022.304793][T28980] hsr_slave_1: entered promiscuous mode [ 1022.310963][T28980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.318878][T28980] Cannot create hsr debugfs directory [ 1022.330351][T28987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.337505][T28987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.364440][T28987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.380777][T28978] team0: Port device team_slave_0 added [ 1022.388256][T28978] team0: Port device team_slave_1 added [ 1022.394543][T28974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.401537][T28974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.428002][T28974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.439912][T28974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.447115][T28974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.473771][T28974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.486456][T28976] team0: Port device team_slave_0 added [ 1022.511096][T28978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.518396][T28978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.544452][T28978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.556209][T28978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.563558][T28978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.589867][T28978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.601894][T28976] team0: Port device team_slave_1 added [ 1022.615386][T28987] hsr_slave_0: entered promiscuous mode [ 1022.621533][T28987] hsr_slave_1: entered promiscuous mode [ 1022.627555][T28987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.635247][T28987] Cannot create hsr debugfs directory [ 1022.674624][T28976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.681671][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.707813][T28976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.735621][T28976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.742661][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.768808][T28976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.791330][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.836964][T28974] hsr_slave_0: entered promiscuous mode [ 1022.843017][T28974] hsr_slave_1: entered promiscuous mode [ 1022.849077][T28974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.856810][T28974] Cannot create hsr debugfs directory [ 1022.870859][T28978] hsr_slave_0: entered promiscuous mode [ 1022.877002][T28978] hsr_slave_1: entered promiscuous mode [ 1022.883063][T28978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.891450][T28978] Cannot create hsr debugfs directory [ 1022.904416][T28976] hsr_slave_0: entered promiscuous mode [ 1022.910616][T28976] hsr_slave_1: entered promiscuous mode [ 1022.916529][T28976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.924204][T28976] Cannot create hsr debugfs directory [ 1022.937978][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.997957][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.055434][T28980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.071185][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.120223][T28980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.182535][T28980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.206491][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.230799][T28980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.290792][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.370592][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.430662][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.492929][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.560296][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.640529][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.732512][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.840609][ T55] bridge_slave_1: left allmulticast mode [ 1023.846275][ T55] bridge_slave_1: left promiscuous mode [ 1023.852012][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.859696][ T55] bridge_slave_0: left allmulticast mode [ 1023.865360][ T55] bridge_slave_0: left promiscuous mode [ 1023.871015][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.879386][ T55] bridge_slave_1: left allmulticast mode [ 1023.885118][ T55] bridge_slave_1: left promiscuous mode [ 1023.891080][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.899054][ T55] bridge_slave_0: left allmulticast mode [ 1023.904706][ T55] bridge_slave_0: left promiscuous mode [ 1023.910454][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.918710][ T55] bridge_slave_1: left allmulticast mode [ 1023.924355][ T55] bridge_slave_1: left promiscuous mode [ 1023.930039][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.937766][ T55] bridge_slave_0: left allmulticast mode [ 1023.943543][ T55] bridge_slave_0: left promiscuous mode [ 1023.949266][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.957291][ T55] bridge_slave_1: left allmulticast mode [ 1023.963148][ T55] bridge_slave_1: left promiscuous mode [ 1023.968793][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.976746][ T55] bridge_slave_0: left allmulticast mode [ 1023.982455][ T55] bridge_slave_0: left promiscuous mode [ 1023.988361][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.400111][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.410637][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.420898][ T55] bond0 (unregistering): Released all slaves [ 1024.430309][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.440846][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.451399][ T55] bond0 (unregistering): Released all slaves [ 1024.460988][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.469925][ T55] bond_slave_0: left promiscuous mode [ 1024.477085][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.486214][ T55] bond_slave_1: left promiscuous mode [ 1024.492683][ T55] bond0 (unregistering): Released all slaves [ 1024.502023][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.512353][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.523367][ T55] bond0 (unregistering): Released all slaves [ 1024.582283][ T55] tipc: Left network mode [ 1024.669791][ T55] IPVS: stopping backup sync thread 26285 ... [ 1024.676193][ T55] IPVS: stopping backup sync thread 28144 ... [ 1024.685097][ T55] hsr_slave_0: left promiscuous mode [ 1024.691060][ T55] hsr_slave_1: left promiscuous mode [ 1024.696818][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.704484][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.712125][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.719652][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.729223][ T55] hsr_slave_0: left promiscuous mode [ 1024.734832][ T55] hsr_slave_1: left promiscuous mode [ 1024.740764][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.748400][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.755938][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.763396][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.772507][ T55] hsr_slave_0: left promiscuous mode [ 1024.778405][ T55] hsr_slave_1: left promiscuous mode [ 1024.784224][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.792048][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.799830][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.807238][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.815725][ T55] hsr_slave_0: left promiscuous mode [ 1024.821420][ T55] hsr_slave_1: left promiscuous mode [ 1024.827108][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.834563][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.842116][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.849654][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.862374][ T55] veth1_macvtap: left promiscuous mode [ 1024.868103][ T55] veth0_macvtap: left promiscuous mode [ 1024.873717][ T55] veth1_vlan: left promiscuous mode [ 1024.879461][ T55] veth0_vlan: left promiscuous mode [ 1024.885268][ T55] veth1_vlan: left promiscuous mode [ 1024.890625][ T55] veth0_vlan: left promiscuous mode [ 1024.896675][ T55] veth1_vlan: left promiscuous mode [ 1024.901945][ T55] veth0_vlan: left promiscuous mode [ 1024.908208][ T55] veth1_vlan: left promiscuous mode [ 1025.081641][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1025.092015][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1025.154124][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1025.164191][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1025.226039][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1025.236731][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1025.291469][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1025.302086][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1025.423593][T28976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1025.432789][T28976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1025.441518][T28976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1025.450442][T28976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1025.487272][T28976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.499750][T28976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.509336][T28985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.516654][T28985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.529247][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.536471][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.603117][T28976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.674795][T28976] veth0_vlan: entered promiscuous mode [ 1025.682729][T28976] veth1_vlan: entered promiscuous mode [ 1025.699446][T28976] veth0_macvtap: entered promiscuous mode [ 1025.706873][T28976] veth1_macvtap: entered promiscuous mode [ 1025.717606][T28976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.727175][T28976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.739119][T28976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.747973][T28976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.756753][T28976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.765763][T28976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.799867][T28974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1025.809776][T28974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1025.819745][T28974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1025.829504][T28974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1025.868939][T28974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.881419][T28974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.891634][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.898826][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.910498][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.917756][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.988638][T28974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.060371][T28974] veth0_vlan: entered promiscuous mode [ 1026.072167][T28974] veth1_vlan: entered promiscuous mode [ 1026.099194][T28978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.112256][T28974] veth0_macvtap: entered promiscuous mode [ 1026.119135][T28978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1026.130689][T28978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1026.139611][T28978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1026.149367][T28974] veth1_macvtap: entered promiscuous mode [ 1026.174191][T28980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1026.183190][T28980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1026.193471][T28980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1026.203085][T28980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1026.217432][T28974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.228135][T28974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.239144][T28974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.249150][T28974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.259749][T28974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.270472][T28974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.282625][T28987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1026.291710][T28987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1026.301837][T28974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.310743][T28974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.319583][T28974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.328306][T28974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.340090][T28987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1026.349548][T28987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.400672][T28978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.426217][T28978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.436697][T29077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7513'. [ 1026.454473][T28996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.461782][T28996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.477105][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.484313][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.550067][T28980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.565910][T28987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.579649][T28980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.597566][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.604759][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.624104][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.631272][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.645684][T28987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.690940][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.698065][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.711259][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.718439][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.756696][T28978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.767702][T28987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.845506][T28980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.885078][T28987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.964521][T28978] veth0_vlan: entered promiscuous mode [ 1026.983271][T28978] veth1_vlan: entered promiscuous mode [ 1027.014994][T28978] veth0_macvtap: entered promiscuous mode [ 1027.023964][T28978] veth1_macvtap: entered promiscuous mode [ 1027.036189][T28978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.046811][T28978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.056652][T28978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.067255][T28978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.080468][T28978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.106252][T28980] veth0_vlan: entered promiscuous mode [ 1027.114587][T28978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.125118][T28978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.135135][T28978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.145794][T28978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.156753][T28978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.165662][T28980] veth1_vlan: entered promiscuous mode [ 1027.186117][T28978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.195085][T28978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.204049][T28978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.212856][T28978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.272474][T28980] veth0_macvtap: entered promiscuous mode [ 1027.291553][T28980] veth1_macvtap: entered promiscuous mode [ 1027.312914][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.323845][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.333961][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.344657][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.354740][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.366137][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.378636][T28980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.417529][T28987] veth0_vlan: entered promiscuous mode [ 1027.429470][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.440131][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.450095][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.460742][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.470650][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.481139][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.530056][T28980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.540318][T28987] veth1_vlan: entered promiscuous mode [ 1027.561395][T28980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.570317][T28980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.579222][T28980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.588107][T28980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.663227][T28987] veth0_macvtap: entered promiscuous mode [ 1027.694435][T28987] veth1_macvtap: entered promiscuous mode [ 1027.738719][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.749457][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.759331][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.769908][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.780112][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.790690][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.800674][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.811205][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.846750][T28987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.851108][T29132] loop3: detected capacity change from 0 to 512 [ 1027.870813][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.872677][T29132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1027.881430][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.896646][T29132] EXT4-fs (loop3): 1 orphan inode deleted [ 1027.901135][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.906798][T29132] EXT4-fs (loop3): 1 truncate cleaned up [ 1027.917218][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.925367][T29132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.932885][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.955892][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.965791][T28987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.976369][T28987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.004708][T28987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.112033][T29141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=29141 comm=syz.3.7516 [ 1028.226701][T28987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.235786][T28987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.244758][T28987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.253589][T28987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.589250][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.932981][T29155] loop2: detected capacity change from 0 to 128 [ 1029.156959][T29157] loop3: detected capacity change from 0 to 128 [ 1029.199759][T29157] syz.3.7527: attempt to access beyond end of device [ 1029.199759][T29157] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1029.291639][T29162] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1029.313031][T29164] loop3: detected capacity change from 0 to 128 [ 1029.454045][T29170] loop3: detected capacity change from 0 to 2048 [ 1029.473308][T29170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.532475][T29166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1029.641656][T29170] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1029.658563][T29170] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1029.671131][T29170] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1029.671131][T29170] [ 1029.680911][T29170] EXT4-fs (loop3): Total free blocks count 0 [ 1029.686983][T29170] EXT4-fs (loop3): Free/Dirty block details [ 1029.693017][T29170] EXT4-fs (loop3): free_blocks=2415919104 [ 1029.698774][T29170] EXT4-fs (loop3): dirty_blocks=64 [ 1029.703959][T29170] EXT4-fs (loop3): Block reservation details [ 1029.709999][T29170] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1029.767188][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1030.029482][T29189] loop3: detected capacity change from 0 to 512 [ 1030.038394][T29189] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7538: casefold flag without casefold feature [ 1030.051313][T29189] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7538: couldn't read orphan inode 15 (err -117) [ 1030.064868][T29189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.087881][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.182404][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7539'. [ 1030.296986][T29201] random: crng reseeded on system resumption [ 1031.470284][T29216] random: crng reseeded on system resumption [ 1034.354950][ T29] audit: type=1400 audit(1725952879.014:11044): avc: denied { getopt } for pid=29258 comm="syz.4.7557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1034.787572][ T29] audit: type=1326 audit(1725952879.434:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.7557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24363def9 code=0x0 [ 1034.877874][T29267] loop4: detected capacity change from 0 to 256 [ 1034.884715][T29267] vfat: Bad value for 'fmask' [ 1035.168923][T29279] loop2: detected capacity change from 0 to 128 [ 1035.184870][T29281] loop0: detected capacity change from 0 to 128 [ 1035.277763][T29281] syz.0.7563: attempt to access beyond end of device [ 1035.277763][T29281] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1035.547937][T29296] loop3: detected capacity change from 0 to 1024 [ 1035.569255][T29296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1035.577630][T29296] System zones: 0-1, 3-36 [ 1035.586166][T29296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.609148][T29296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.880804][T29311] loop0: detected capacity change from 0 to 128 [ 1038.528961][T29320] loop2: detected capacity change from 0 to 128 [ 1038.719472][T29335] loop3: detected capacity change from 0 to 2048 [ 1038.756995][T29338] loop0: detected capacity change from 0 to 128 [ 1038.862480][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7577'. [ 1038.878007][T29335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.893646][T29349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=29349 comm=syz.1.7583 [ 1039.170065][T29335] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1039.209605][T29335] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1039.222066][T29335] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1039.222066][T29335] [ 1039.231761][T29335] EXT4-fs (loop3): Total free blocks count 0 [ 1039.238198][T29335] EXT4-fs (loop3): Free/Dirty block details [ 1039.244256][T29335] EXT4-fs (loop3): free_blocks=2415919104 [ 1039.250101][T29335] EXT4-fs (loop3): dirty_blocks=64 [ 1039.255233][T29335] EXT4-fs (loop3): Block reservation details [ 1039.261272][T29335] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1039.437947][T28985] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1039.735647][T29382] loop4: detected capacity change from 0 to 128 [ 1039.861781][T29387] syz.4.7594: attempt to access beyond end of device [ 1039.861781][T29387] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1040.224618][T29398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=29398 comm=syz.1.7596 [ 1040.826920][T29413] loop3: detected capacity change from 0 to 2048 [ 1040.849984][T29413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.393648][T29413] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1041.410103][T29413] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1041.422556][T29413] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1041.422556][T29413] [ 1041.432300][T29413] EXT4-fs (loop3): Total free blocks count 0 [ 1041.438381][T29413] EXT4-fs (loop3): Free/Dirty block details [ 1041.444330][T29413] EXT4-fs (loop3): free_blocks=2415919104 [ 1041.450176][T29413] EXT4-fs (loop3): dirty_blocks=64 [ 1041.455388][T29413] EXT4-fs (loop3): Block reservation details [ 1041.461458][T29413] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1041.513889][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1041.581179][T29436] loop4: detected capacity change from 0 to 128 [ 1041.909263][T29439] loop0: detected capacity change from 0 to 512 [ 1041.940569][T29439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1042.030512][T29439] EXT4-fs (loop0): 1 orphan inode deleted [ 1042.036377][T29439] EXT4-fs (loop0): 1 truncate cleaned up [ 1042.125383][T29439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.385885][T29450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=29450 comm=syz.0.7610 [ 1042.540700][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.667727][T29468] loop2: detected capacity change from 0 to 1024 [ 1042.751471][T29468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1042.759968][T29468] System zones: 0-1, 3-36 [ 1042.766017][T29468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.780095][T29468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.304306][T29505] loop3: detected capacity change from 0 to 128 [ 1046.311197][ T29] audit: type=1326 audit(1725952890.964:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29488 comm="syz.0.7625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8d8b7def9 code=0x0 [ 1046.440800][T29512] loop4: detected capacity change from 0 to 128 [ 1046.832179][T29512] syz.4.7632: attempt to access beyond end of device [ 1046.832179][T29512] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1047.589769][T29532] loop0: detected capacity change from 0 to 128 [ 1047.665218][T29532] syz.0.7639: attempt to access beyond end of device [ 1047.665218][T29532] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1047.915889][T29550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1048.907627][T29563] loop3: detected capacity change from 0 to 2048 [ 1048.922061][T29563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.121554][T29579] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1049.145782][T29579] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1049.158512][T29579] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1049.158512][T29579] [ 1049.168394][T29579] EXT4-fs (loop3): Total free blocks count 0 [ 1049.174479][T29579] EXT4-fs (loop3): Free/Dirty block details [ 1049.180451][T29579] EXT4-fs (loop3): free_blocks=2415919104 [ 1049.186429][T29579] EXT4-fs (loop3): dirty_blocks=64 [ 1049.191816][T29579] EXT4-fs (loop3): Block reservation details [ 1049.197935][T29579] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1049.204017][T28985] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1049.699623][T29594] loop0: detected capacity change from 0 to 128 [ 1049.773204][ T29] audit: type=1400 audit(1725952894.434:11047): avc: denied { ioctl } for pid=29591 comm="syz.3.7656" path="socket:[131460]" dev="sockfs" ino=131460 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1049.812594][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7656'. [ 1050.012806][T29598] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1050.139209][T29601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7659'. [ 1050.152580][T29592] infiniband syz2: set active [ 1050.157407][T29592] infiniband syz2: added team_slave_1 [ 1050.179667][T29606] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1050.197405][T29592] RDS/IB: syz2: added [ 1050.206685][T29592] smc: adding ib device syz2 with port count 1 [ 1050.223119][T29592] smc: ib device syz2 port 1 has pnetid [ 1050.712064][T29622] netlink: 'syz.2.7664': attribute type 4 has an invalid length. [ 1050.750481][T29622] netlink: 'syz.2.7664': attribute type 4 has an invalid length. [ 1050.894795][T29631] loop0: detected capacity change from 0 to 128 [ 1051.942864][T29658] loop4: detected capacity change from 0 to 128 [ 1052.137432][T29661] loop3: detected capacity change from 0 to 128 [ 1052.519129][T29664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.527998][T29664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.538610][T29664] loop0: detected capacity change from 0 to 128 [ 1052.548430][T29664] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1052.561956][T29664] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.670220][T29664] netlink: 'syz.0.7676': attribute type 1 has an invalid length. [ 1052.678066][T29664] netlink: 'syz.0.7676': attribute type 2 has an invalid length. [ 1052.725365][T29675] loop2: detected capacity change from 0 to 128 [ 1052.780272][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7681'. [ 1052.801239][T29680] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1052.849592][T29684] loop4: detected capacity change from 0 to 1024 [ 1052.856460][T29684] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1053.141824][T29694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1053.265183][T29696] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 1053.896889][T28974] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1054.062130][T29721] netlink: 'syz.3.7694': attribute type 4 has an invalid length. [ 1054.072255][T29715] loop4: detected capacity change from 0 to 128 [ 1054.193108][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1054.218041][T29726] netlink: 'syz.3.7694': attribute type 4 has an invalid length. [ 1054.477719][T29730] loop3: detected capacity change from 0 to 128 [ 1054.952194][T29738] loop4: detected capacity change from 0 to 2048 [ 1055.690493][T29738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.845849][T29758] netlink: 'syz.0.7705': attribute type 4 has an invalid length. [ 1055.859905][T29738] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1055.876737][T29738] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1055.889275][T29738] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1055.889275][T29738] [ 1055.889367][T29758] netlink: 'syz.0.7705': attribute type 4 has an invalid length. [ 1055.899031][T29738] EXT4-fs (loop4): Total free blocks count 0 [ 1055.913150][T29738] EXT4-fs (loop4): Free/Dirty block details [ 1055.919180][T29738] EXT4-fs (loop4): free_blocks=2415919104 [ 1055.924929][T29738] EXT4-fs (loop4): dirty_blocks=64 [ 1055.930294][T29738] EXT4-fs (loop4): Block reservation details [ 1055.936309][T29738] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1056.077047][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1056.190260][T29769] loop0: detected capacity change from 0 to 128 [ 1056.213839][T29769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1056.245020][T29769] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.726338][T29775] syz2: rxe_newlink: already configured on team_slave_1 [ 1056.737437][T29775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7710'. [ 1056.776616][T29774] loop2: detected capacity change from 0 to 128 [ 1056.952859][T29781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.977367][T29781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.994509][T29781] loop3: detected capacity change from 0 to 128 [ 1057.009009][T29781] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1057.036470][T29781] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.124554][T29781] netlink: 'syz.3.7713': attribute type 1 has an invalid length. [ 1057.132397][T29781] netlink: 'syz.3.7713': attribute type 2 has an invalid length. [ 1057.749554][T29796] loop2: detected capacity change from 0 to 1024 [ 1057.759960][T29796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1057.768179][T29796] System zones: 0-1, 3-36 [ 1057.774442][T29796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.789481][T29796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.871076][T28980] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1058.055862][T29799] random: crng reseeded on system resumption [ 1058.185738][T29808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7721'. [ 1058.226905][T29808] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1058.239755][T29803] loop3: detected capacity change from 0 to 8192 [ 1058.656585][T28974] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1059.217681][T29835] random: crng reseeded on system resumption [ 1060.112911][T29866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.121970][T29866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.132421][T29866] loop4: detected capacity change from 0 to 128 [ 1060.140803][T29866] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1060.153911][T29866] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.205544][T29866] netlink: 'syz.4.7739': attribute type 1 has an invalid length. [ 1060.213668][T29866] netlink: 'syz.4.7739': attribute type 2 has an invalid length. [ 1060.497899][T29893] loop2: detected capacity change from 0 to 128 [ 1060.611331][T29897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1060.870217][T28987] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.944336][T29911] GUP no longer grows the stack in syz.0.7756 (29911): 20004000-2000a000 (20002000) [ 1060.953998][T29911] CPU: 1 UID: 0 PID: 29911 Comm: syz.0.7756 Tainted: G W 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 1060.966278][T29911] Tainted: [W]=WARN [ 1060.970122][T29911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1060.980321][T29911] Call Trace: [ 1060.983625][T29911] [ 1060.986579][T29911] dump_stack_lvl+0xf2/0x150 [ 1060.991292][T29911] dump_stack+0x15/0x20 [ 1060.995514][T29911] __get_user_pages+0xbb6/0x10d0 [ 1061.000637][T29911] __gup_longterm_locked+0xa7b/0x10b0 [ 1061.006145][T29911] ? try_grab_folio_fast+0xc7/0x310 [ 1061.011467][T29911] gup_fast_fallback+0x1cbc/0x2480 [ 1061.016714][T29911] get_user_pages_fast+0x5f/0x90 [ 1061.021740][T29911] __iov_iter_get_pages_alloc+0x27f/0x660 [ 1061.027531][T29911] iov_iter_get_pages2+0x5f/0xa0 [ 1061.032510][T29911] __se_sys_vmsplice+0x513/0xdc0 [ 1061.037689][T29911] __x64_sys_vmsplice+0x55/0x70 [ 1061.042625][T29911] x64_sys_call+0xb21/0x2d60 [ 1061.047252][T29911] do_syscall_64+0xc9/0x1c0 [ 1061.051790][T29911] ? clear_bhb_loop+0x55/0xb0 [ 1061.056535][T29911] ? clear_bhb_loop+0x55/0xb0 [ 1061.061234][T29911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.067219][T29911] RIP: 0033:0x7fa8d8b7def9 [ 1061.071662][T29911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.091729][T29911] RSP: 002b:00007fa8d77af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1061.100253][T29911] RAX: ffffffffffffffda RBX: 00007fa8d8d36130 RCX: 00007fa8d8b7def9 [ 1061.108552][T29911] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000007 [ 1061.116532][T29911] RBP: 00007fa8d8bf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1061.124526][T29911] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1061.132696][T29911] R13: 0000000000000000 R14: 00007fa8d8d36130 R15: 00007ffc94ddc2e8 [ 1061.140906][T29911] [ 1061.169843][T29911] loop0: detected capacity change from 0 to 1024 [ 1061.176685][T29911] ext4: Unknown parameter 'pcr' [ 1061.364720][T29928] loop4: detected capacity change from 0 to 512 [ 1061.815051][T29949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7767'. [ 1061.946937][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7771'. [ 1062.057854][T29960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.066473][T29960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.076337][T29960] loop4: detected capacity change from 0 to 128 [ 1062.084598][T29960] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1062.098080][T29960] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.135040][T29960] netlink: 'syz.4.7774': attribute type 1 has an invalid length. [ 1062.142949][T29960] netlink: 'syz.4.7774': attribute type 2 has an invalid length. [ 1062.690687][T28987] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1063.070752][T29998] random: crng reseeded on system resumption [ 1063.318934][T30005] loop3: detected capacity change from 0 to 128 [ 1063.946219][T30036] loop0: detected capacity change from 0 to 128 [ 1063.977212][T30036] syz.0.7800: attempt to access beyond end of device [ 1063.977212][T30036] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1064.221626][T30065] syz2: rxe_newlink: already configured on team_slave_1 [ 1064.228933][T30068] loop2: detected capacity change from 0 to 128 [ 1064.238651][T30065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7809'. [ 1064.258252][T30065] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 1064.258966][T30068] syz.2.7811: attempt to access beyond end of device [ 1064.258966][T30068] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1064.787972][T30082] loop2: detected capacity change from 0 to 128 [ 1065.132188][T30103] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1065.793340][T30112] loop0: detected capacity change from 0 to 128 [ 1065.825531][T30112] syz.0.7824: attempt to access beyond end of device [ 1065.825531][T30112] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1067.153468][T30162] loop0: detected capacity change from 0 to 1024 [ 1067.227111][T30162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1067.235314][T30162] System zones: 0-1, 3-36 [ 1067.242388][T30162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.256264][T30162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.349066][T30169] loop3: detected capacity change from 0 to 1024 [ 1067.356192][T30169] ext4: Unknown parameter 'pcr' [ 1068.205924][T30186] loop3: detected capacity change from 0 to 128 [ 1069.052469][T30221] loop2: detected capacity change from 0 to 128 [ 1069.110030][T30221] syz.2.7858: attempt to access beyond end of device [ 1069.110030][T30221] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1069.734893][T30241] loop2: detected capacity change from 0 to 1024 [ 1069.751895][T30241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1069.771851][T30241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1069.790309][T30241] System zones: 0-1, 3-12 [ 1069.800164][T30241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.592020][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.688385][T30265] loop4: detected capacity change from 0 to 128 [ 1071.200624][T30285] random: crng reseeded on system resumption [ 1071.328710][T30288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.337321][T30288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.353505][T30288] netlink: 'syz.1.7881': attribute type 1 has an invalid length. [ 1071.361358][T30288] netlink: 'syz.1.7881': attribute type 2 has an invalid length. [ 1071.630896][T30297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1071.791527][T30304] netlink: 'syz.0.7885': attribute type 10 has an invalid length. [ 1071.805104][T30304] team0: Cannot enslave team device to itself [ 1072.487021][T30324] loop2: detected capacity change from 0 to 128 [ 1072.522047][T30324] syz.2.7893: attempt to access beyond end of device [ 1072.522047][T30324] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1072.538697][T30326] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1072.666756][T30330] loop2: detected capacity change from 0 to 128 [ 1072.819740][T30334] loop3: detected capacity change from 0 to 2048 [ 1072.826878][T30334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1072.840569][T30334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.856693][T30334] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.7896: path /77/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1072.890483][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.934828][T30340] loop3: detected capacity change from 0 to 2048 [ 1072.949310][T30340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.122030][T30340] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1073.140783][T30340] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1073.153380][T30340] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1073.153380][T30340] [ 1073.163184][T30340] EXT4-fs (loop3): Total free blocks count 0 [ 1073.169310][T30340] EXT4-fs (loop3): Free/Dirty block details [ 1073.175264][T30340] EXT4-fs (loop3): free_blocks=2415919104 [ 1073.181020][T30340] EXT4-fs (loop3): dirty_blocks=64 [ 1073.186142][T30340] EXT4-fs (loop3): Block reservation details [ 1073.192145][T30340] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1073.247369][T28985] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1073.338746][T30350] loop0: detected capacity change from 0 to 1024 [ 1073.345883][T30350] ext4: Unknown parameter 'pcr' [ 1075.231276][T30397] loop3: detected capacity change from 0 to 8192 [ 1075.240059][T30399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1075.294046][T30405] loop0: detected capacity change from 0 to 1024 [ 1075.302155][T30405] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1076.467857][ T29] audit: type=1326 audit(1725952921.074:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.1.7922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79c2d4def9 code=0x0 [ 1076.608411][T30428] loop2: detected capacity change from 0 to 8192 [ 1076.681594][T30433] loop2: detected capacity change from 0 to 2048 [ 1076.688555][T30433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1076.710114][T30433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.731393][T30433] EXT4-fs error (device loop2): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.2.7928: path /82/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1076.778372][T30443] loop3: detected capacity change from 0 to 1024 [ 1076.801972][T30443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1076.810434][T30443] System zones: 0-1, 3-36 [ 1076.817524][T30443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.831442][T30443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.943138][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.193010][T30449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1077.690097][T30460] loop0: detected capacity change from 0 to 1024 [ 1077.705691][T30460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1077.713995][T30460] System zones: 0-1, 3-36 [ 1077.719651][T30460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.733425][T30460] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.833170][T30464] loop3: detected capacity change from 0 to 1024 [ 1077.840028][T30464] ext4: Unknown parameter 'pcr' [ 1078.508873][T30477] random: crng reseeded on system resumption [ 1078.727047][T30489] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1078.782555][T30494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30494 comm=syz.3.7946 [ 1079.716036][T30528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30528 comm=syz.3.7957 [ 1079.828647][T30532] loop0: detected capacity change from 0 to 1024 [ 1079.875825][T30532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1079.934852][T30532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1079.943164][T30532] System zones: 0-1, 3-12 [ 1079.950528][T30532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.005694][T30543] loop3: detected capacity change from 0 to 512 [ 1080.015116][T30543] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7961: casefold flag without casefold feature [ 1080.029551][T30543] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7961: couldn't read orphan inode 15 (err -117) [ 1080.042372][T30543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.066512][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.371002][T30556] loop3: detected capacity change from 0 to 1024 [ 1080.388986][T30555] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1080.482129][T30556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1080.490695][T30556] System zones: 0-1, 3-36 [ 1080.496408][T30556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.526808][T30556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.054767][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.214253][T30571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30571 comm=syz.2.7970 [ 1081.653819][T30580] loop2: detected capacity change from 0 to 512 [ 1081.663441][T30580] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.7973: casefold flag without casefold feature [ 1081.676363][T30580] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7973: couldn't read orphan inode 15 (err -117) [ 1081.689846][T30580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.712549][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.146400][T30601] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1082.156125][T30601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7980'. [ 1082.618205][T30618] loop4: detected capacity change from 0 to 1024 [ 1082.661850][T30618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.689392][T30627] syz2: rxe_newlink: already configured on team_slave_1 [ 1082.689466][T30625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.717069][ T29] audit: type=1400 audit(1725952927.374:11049): avc: denied { setattr } for pid=30617 comm="syz.4.7985" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1082.740567][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.750941][T30625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.788758][T30622] netlink: 'syz.1.7987': attribute type 1 has an invalid length. [ 1082.796557][T30622] netlink: 'syz.1.7987': attribute type 2 has an invalid length. [ 1083.129115][T30638] loop4: detected capacity change from 0 to 128 [ 1083.187831][T30638] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1083.207783][T30638] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.294566][T30641] loop0: detected capacity change from 0 to 128 [ 1084.349376][T30669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30669 comm=syz.2.8001 [ 1084.393398][T30671] random: crng reseeded on system resumption [ 1084.908453][T30683] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1085.138427][T30687] loop3: detected capacity change from 0 to 128 [ 1085.833220][T30714] random: crng reseeded on system resumption [ 1085.904822][T30712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1086.048655][T30718] loop3: detected capacity change from 0 to 8192 [ 1086.125008][T30722] loop3: detected capacity change from 0 to 128 [ 1086.160712][T30722] syz.3.8019: attempt to access beyond end of device [ 1086.160712][T30722] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1086.497833][T28987] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1086.514949][T30735] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1087.375254][T30765] loop4: detected capacity change from 0 to 128 [ 1087.484396][T30769] loop0: detected capacity change from 0 to 128 [ 1087.557601][T30769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1087.663038][T30769] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.870347][T30783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1087.907064][T30787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.915776][T30787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.942673][T30787] loop2: detected capacity change from 0 to 128 [ 1087.954212][T30787] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1087.966885][T30787] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.017331][T30787] netlink: 'syz.2.8043': attribute type 1 has an invalid length. [ 1088.025224][T30787] netlink: 'syz.2.8043': attribute type 2 has an invalid length. [ 1088.565727][T28978] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1088.617380][T30807] loop3: detected capacity change from 0 to 1024 [ 1088.636510][T30807] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1088.659251][T30809] loop2: detected capacity change from 0 to 2048 [ 1088.676411][T30809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1088.783176][T30809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.823377][T30809] EXT4-fs error (device loop2): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.2.8048: path /111/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1088.932138][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.646458][T30826] loop3: detected capacity change from 0 to 8192 [ 1089.830813][T30841] loop3: detected capacity change from 0 to 8192 [ 1090.003793][T30847] loop4: detected capacity change from 0 to 1024 [ 1090.118848][T30847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1090.127123][T30847] System zones: 0-1, 3-36 [ 1090.209808][T30847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.223659][T30847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.500480][T30852] loop2: detected capacity change from 0 to 8192 [ 1090.667231][T28974] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.691274][T30859] loop2: detected capacity change from 0 to 1024 [ 1090.704562][T30859] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1090.722888][T30863] loop0: detected capacity change from 0 to 512 [ 1090.751202][T30863] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.8066: casefold flag without casefold feature [ 1090.785387][T30863] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.8066: couldn't read orphan inode 15 (err -117) [ 1090.799755][T30863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.825346][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.850741][T30868] loop0: detected capacity change from 0 to 128 [ 1090.971123][T30871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8068'. [ 1091.014169][T30871] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1091.098897][T30875] loop3: detected capacity change from 0 to 128 [ 1091.282774][T30887] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1091.302042][T30887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8075'. [ 1091.382838][T30891] loop4: detected capacity change from 0 to 128 [ 1091.437167][T30891] syz.4.8077: attempt to access beyond end of device [ 1091.437167][T30891] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1091.583874][T30895] random: crng reseeded on system resumption [ 1092.036674][T30907] loop4: detected capacity change from 0 to 1024 [ 1092.043594][T30907] ext4: Unknown parameter 'pcr' [ 1092.136075][T30910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8083'. [ 1092.234406][T30911] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1092.607382][T30928] loop0: detected capacity change from 0 to 1024 [ 1092.614980][T30928] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1093.036397][T30942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1094.363457][T30985] random: crng reseeded on system resumption [ 1094.626879][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8113'. [ 1095.467156][T31024] loop3: detected capacity change from 0 to 512 [ 1095.547119][T31026] loop0: detected capacity change from 0 to 1024 [ 1095.553983][T31026] ext4: Unknown parameter 'pcr' [ 1095.720302][T31024] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.8123: casefold flag without casefold feature [ 1095.796977][T31024] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8123: couldn't read orphan inode 15 (err -117) [ 1095.870071][T31024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.003351][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.624494][T31046] loop3: detected capacity change from 0 to 1024 [ 1097.041094][T31046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1097.049286][T31046] System zones: 0-1, 3-36 [ 1097.054566][T31046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.071404][T31046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.968993][T31082] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8138'. [ 1098.044102][T31087] loop0: detected capacity change from 0 to 128 [ 1098.079238][T31087] syz.0.8139: attempt to access beyond end of device [ 1098.079238][T31087] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1098.241092][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1098.626854][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1098.657224][T31118] loop3: detected capacity change from 0 to 128 [ 1098.694808][T31118] syz.3.8154: attempt to access beyond end of device [ 1098.694808][T31118] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1098.787094][T31123] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1099.081998][T31127] loop3: detected capacity change from 0 to 1024 [ 1099.094129][T31127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1099.102502][T31127] System zones: 0-1, 3-36 [ 1099.109408][T31127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.122793][T31127] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.059396][T31149] netlink: 'syz.4.8163': attribute type 4 has an invalid length. [ 1100.089526][T31149] netlink: 'syz.4.8163': attribute type 4 has an invalid length. [ 1100.311099][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1100.701028][T31168] loop4: detected capacity change from 0 to 128 [ 1100.923231][T31170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8170'. [ 1101.458709][T31187] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1101.774318][T31198] loop3: detected capacity change from 0 to 1024 [ 1101.791121][T31198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.844765][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.996566][T31203] loop3: detected capacity change from 0 to 1024 [ 1102.005682][T31203] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1102.173315][T31208] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1102.184457][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1103.027449][T31226] loop3: detected capacity change from 0 to 2048 [ 1103.034312][T31226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1103.050509][T31226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.076972][T31226] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.8187: path /148/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1103.288463][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.975537][T31254] loop0: detected capacity change from 0 to 1024 [ 1103.999902][T31254] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1104.533314][T31257] loop3: detected capacity change from 0 to 512 [ 1104.584938][T31257] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.8196: casefold flag without casefold feature [ 1104.604170][T31257] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8196: couldn't read orphan inode 15 (err -117) [ 1104.618401][T31257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.652226][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.700768][T31271] loop3: detected capacity change from 0 to 2048 [ 1104.709292][T31271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1104.730400][T31271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.744740][T31271] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.8201: path /152/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1104.779099][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.070295][T31298] loop3: detected capacity change from 0 to 128 [ 1105.129902][T31298] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1105.178152][T31298] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.242267][T31320] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1107.154657][T31342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1107.452773][T31353] loop2: detected capacity change from 0 to 2048 [ 1107.473888][T31353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1107.509062][T31353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.524567][T31353] EXT4-fs error (device loop2): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.2.8226: path /147/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1107.602578][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.129637][T28980] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1108.322134][T31388] loop4: detected capacity change from 0 to 1024 [ 1108.344603][T31388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.388442][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.416004][T31399] loop3: detected capacity change from 0 to 2048 [ 1108.425007][T31399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1108.442871][T31399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.456541][T31399] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.8239: path /155/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1108.491429][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.502631][ T29] audit: type=1400 audit(1725952953.154:11050): avc: denied { create } for pid=31411 comm="syz.1.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1108.511191][T31409] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1108.523609][ T29] audit: type=1400 audit(1725952953.154:11051): avc: denied { bind } for pid=31411 comm="syz.1.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1109.011874][T31439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1109.294705][T31442] loop0: detected capacity change from 0 to 1024 [ 1109.335973][T31442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.454027][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.791772][T31449] loop0: detected capacity change from 0 to 2048 [ 1109.856197][T31449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1109.926642][T31449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.959552][T31449] EXT4-fs error (device loop0): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.0.8253: path /131/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1110.076108][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.156673][T31457] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8255'. [ 1111.389253][T31485] loop2: detected capacity change from 0 to 512 [ 1111.396727][T31485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1111.409344][T31485] EXT4-fs (loop2): 1 truncate cleaned up [ 1111.416102][T31485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.471892][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.499493][T31488] loop4: detected capacity change from 0 to 128 [ 1112.013351][T31499] loop3: detected capacity change from 0 to 2048 [ 1112.060365][T31499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1112.102189][T31499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.146081][T31499] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.8270: path /162/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1112.227209][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.315442][T31512] loop0: detected capacity change from 0 to 2048 [ 1112.382420][T31512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.646313][T31512] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1112.665747][T31512] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1112.678195][T31512] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1112.678195][T31512] [ 1112.687853][T31512] EXT4-fs (loop0): Total free blocks count 0 [ 1112.693858][T31512] EXT4-fs (loop0): Free/Dirty block details [ 1112.699880][T31512] EXT4-fs (loop0): free_blocks=2415919104 [ 1112.705760][T31512] EXT4-fs (loop0): dirty_blocks=64 [ 1112.710965][T31512] EXT4-fs (loop0): Block reservation details [ 1112.716970][T31512] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 1112.768608][T31542] loop4: detected capacity change from 0 to 2048 [ 1112.785568][T31542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1112.809488][T31542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.823730][T28996] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1112.837380][T31542] EXT4-fs error (device loop4): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.4.8285: path /138/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1112.876504][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.320028][T31556] random: crng reseeded on system resumption [ 1114.219694][T31569] loop2: detected capacity change from 0 to 128 [ 1114.247851][T31569] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1114.260333][T31569] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.298547][T31571] loop4: detected capacity change from 0 to 1764 [ 1114.387234][ T29] audit: type=1400 audit(1725952959.044:11052): avc: denied { ioctl } for pid=31576 comm="syz.0.8295" path="socket:[137610]" dev="sockfs" ino=137610 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1114.448522][T31580] loop4: detected capacity change from 0 to 2048 [ 1114.455420][T31580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1114.480088][T31580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.496990][T31580] EXT4-fs error (device loop4): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.4.8297: path /141/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1114.571782][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.802201][T31609] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1116.481418][T31617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1116.838319][T28978] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1117.190054][T31626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1117.315741][T31631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31631 comm=syz.3.8311 [ 1117.334352][T31630] loop2: detected capacity change from 0 to 1024 [ 1117.366122][T31630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1117.387443][T31633] loop3: detected capacity change from 0 to 1024 [ 1117.404004][T31633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.450242][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.466994][T31630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1117.475994][T31630] System zones: 0-1, 3-12 [ 1117.482062][T31630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.966550][T31661] loop0: detected capacity change from 0 to 128 [ 1117.992578][T31661] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1118.005986][T31661] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.087092][T31664] loop4: detected capacity change from 0 to 512 [ 1118.120579][T31664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1118.167879][T31664] EXT4-fs (loop4): 1 truncate cleaned up [ 1118.174671][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.176743][T31664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.222496][T31667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31667 comm=syz.2.8322 [ 1118.314250][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.373957][T31671] loop2: detected capacity change from 0 to 1024 [ 1118.404896][T31671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.449085][T31673] loop4: detected capacity change from 0 to 512 [ 1118.460952][T31673] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8325: casefold flag without casefold feature [ 1118.514388][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.536566][T31673] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8325: couldn't read orphan inode 15 (err -117) [ 1118.576132][T31673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.631615][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.030777][ T29] audit: type=1400 audit(1725952963.694:11053): avc: denied { bind } for pid=31687 comm="syz.3.8330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1119.058373][ T29] audit: type=1400 audit(1725952963.714:11054): avc: denied { write } for pid=31687 comm="syz.3.8330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1119.669297][T31699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31699 comm=syz.4.8334 [ 1119.827181][T31705] loop2: detected capacity change from 0 to 1024 [ 1119.853797][T31705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1119.921683][T31705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1119.924776][T31707] loop3: detected capacity change from 0 to 1024 [ 1119.947675][T31705] System zones: 0-1, 3-12 [ 1119.964056][T31705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.014435][T31707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.061271][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.407691][T31716] loop4: detected capacity change from 0 to 512 [ 1120.429417][T31716] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8338: casefold flag without casefold feature [ 1120.450537][T31716] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8338: couldn't read orphan inode 15 (err -117) [ 1120.478111][T31716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.515976][T28974] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1120.536748][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.596583][T31721] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8339'. [ 1120.668961][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.702893][T31730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31730 comm=syz.3.8345 [ 1120.737292][T31736] loop3: detected capacity change from 0 to 1024 [ 1120.746337][T31736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.770948][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.820912][T31740] loop4: detected capacity change from 0 to 128 [ 1120.935259][T31743] random: crng reseeded on system resumption [ 1121.135716][T31746] loop0: detected capacity change from 0 to 128 [ 1121.193524][T31746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1121.224653][T31746] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.525095][T31753] loop4: detected capacity change from 0 to 512 [ 1121.561971][T31753] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8351: casefold flag without casefold feature [ 1121.579297][T31754] loop3: detected capacity change from 0 to 1024 [ 1121.607716][T31753] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8351: couldn't read orphan inode 15 (err -117) [ 1121.620417][T31753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.642633][T31754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 1121.651754][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.693211][T31754] System zones: 0-1, 3-36 [ 1121.711453][T31754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.845380][T31766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1121.857377][T31754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.079990][T31769] loop4: detected capacity change from 0 to 1024 [ 1122.123657][T31769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1122.183167][T31769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1122.224813][T31769] System zones: 0-1, 3-12 [ 1122.238503][T31769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.572981][T31774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31774 comm=syz.2.8356 [ 1122.693401][T31779] loop3: detected capacity change from 0 to 1024 [ 1122.712471][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.738456][T31779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.788967][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.810798][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.844635][T31787] loop2: detected capacity change from 0 to 2048 [ 1122.872284][T31787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1122.890221][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.930998][T31787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.938186][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8361'. [ 1122.964906][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.968795][T31787] EXT4-fs error (device loop2): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.2.8360: path /176/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1123.094024][ T50] bridge_slave_1: left allmulticast mode [ 1123.099756][ T50] bridge_slave_1: left promiscuous mode [ 1123.105607][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.136230][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.155974][ T50] bridge_slave_0: left allmulticast mode [ 1123.161947][ T50] bridge_slave_0: left promiscuous mode [ 1123.167731][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.285160][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.301349][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.310488][T31805] loop3: detected capacity change from 0 to 512 [ 1123.322338][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.323766][T31805] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.8365: casefold flag without casefold feature [ 1123.343984][T31805] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8365: couldn't read orphan inode 15 (err -117) [ 1123.358053][T31805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.370921][ T50] bond0 (unregistering): Released all slaves [ 1123.386711][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8362'. [ 1123.396738][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8364'. [ 1123.476958][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.627653][T31815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31815 comm=syz.3.8368 [ 1123.655286][ T50] hsr_slave_0: left promiscuous mode [ 1123.672736][T28974] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1123.688281][ T50] hsr_slave_1: left promiscuous mode [ 1123.694268][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.701843][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.710221][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.717832][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.758141][ T50] veth1_macvtap: left promiscuous mode [ 1123.763698][ T50] veth0_macvtap: left promiscuous mode [ 1123.769248][ T50] veth1_vlan: left promiscuous mode [ 1123.774572][ T50] veth0_vlan: left promiscuous mode [ 1124.062781][T31821] loop3: detected capacity change from 0 to 2048 [ 1124.079583][T31821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1124.102617][T31821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.117525][T31821] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.3.8371: path /192/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1124.143430][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1124.151962][T28980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.162490][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1124.268849][T31781] chnl_net:caif_netlink_parms(): no params data found [ 1124.326308][T31781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.333469][T31781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.341180][T31781] bridge_slave_0: entered allmulticast mode [ 1124.347807][T31781] bridge_slave_0: entered promiscuous mode [ 1124.365039][T31781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.372189][T31781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.397342][T31838] loop4: detected capacity change from 0 to 1024 [ 1124.416491][T31838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.416896][T31781] bridge_slave_1: entered allmulticast mode [ 1124.443678][T31781] bridge_slave_1: entered promiscuous mode [ 1124.476587][T28987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.522965][T31781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.537385][T31781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.547003][T31841] loop0: detected capacity change from 0 to 1024 [ 1124.551783][T31844] loop2: detected capacity change from 0 to 1024 [ 1124.577956][T31844] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1124.578400][T31781] team0: Port device team_slave_0 added [ 1124.589429][T31841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1124.594416][T31781] team0: Port device team_slave_1 added [ 1124.685905][T31781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.693000][T31781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.719056][T31781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.731589][T31841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1124.740189][T31841] System zones: 0-1, 3-12 [ 1124.746722][T31841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.766817][T31781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.773847][T31781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.800033][T31781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.104100][T31781] hsr_slave_0: entered promiscuous mode [ 1125.151670][T31781] hsr_slave_1: entered promiscuous mode [ 1125.316324][T31857] loop4: detected capacity change from 0 to 128 [ 1125.451676][T31859] loop2: detected capacity change from 0 to 512 [ 1125.467681][T31857] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1125.482531][T31859] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.8379: casefold flag without casefold feature [ 1125.530677][T31859] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8379: couldn't read orphan inode 15 (err -117) [ 1125.548709][T31859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.564453][T31857] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.629093][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.645935][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.695364][T31864] loop0: detected capacity change from 0 to 2048 [ 1125.698831][T31865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8380'. [ 1125.703377][T31864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1125.710968][T31781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1125.726441][T31781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1125.744470][T31781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1125.753997][T31864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.758404][T31781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1125.775393][T31864] EXT4-fs error (device loop0): ext4_read_inline_dir:1564: inode #12: block 5: comm syz.0.8381: path /160/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 1125.829191][T28974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.846115][T31781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.860208][T31781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.874647][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.881978][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.911862][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.918981][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.946358][T31873] loop2: detected capacity change from 0 to 1024 [ 1125.957054][T31873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.984138][T31781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1125.994608][T31781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1126.006262][T28978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.076787][T31781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.157592][T31781] veth0_vlan: entered promiscuous mode [ 1126.167505][T31781] veth1_vlan: entered promiscuous mode [ 1126.189738][T31781] veth0_macvtap: entered promiscuous mode [ 1126.199957][T31781] veth1_macvtap: entered promiscuous mode [ 1126.213166][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.223703][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.233783][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.244272][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.254261][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.264714][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.274698][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.285228][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.299113][T31781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.310771][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.321414][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.331411][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.341868][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.351736][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.362208][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.372091][T31781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.382599][T31781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.393641][T31781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.393726][T28996] ================================================================== [ 1126.402621][T31781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.408940][T28996] BUG: KCSAN: data-race in batadv_hardif_activate_interface / batadv_mcast_mla_update [ 1126.417659][T31781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.427224][T28996] [ 1126.427233][T28996] write to 0xffff88811608ca10 of 1 bytes by task 31781 on cpu 1: [ 1126.435917][T31781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.438189][T28996] batadv_hardif_activate_interface+0x99/0x330 [ 1126.438226][T28996] batadv_hard_if_event+0x47a/0x1010 [ 1126.445935][T31781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.454753][T28996] raw_notifier_call_chain+0x6f/0x1d0 [ 1126.454781][T28996] call_netdevice_notifiers_info+0xae/0x100 [ 1126.486477][T28996] __dev_notify_flags+0xff/0x1a0 [ 1126.491447][T28996] dev_change_flags+0xab/0xd0 [ 1126.496155][T28996] do_setlink+0x844/0x2490 [ 1126.500597][T28996] rtnl_newlink+0x11a3/0x1690 [ 1126.505293][T28996] rtnetlink_rcv_msg+0x6aa/0x710 [ 1126.510518][T28996] netlink_rcv_skb+0x12c/0x230 [ 1126.515301][T28996] rtnetlink_rcv+0x1c/0x30 [ 1126.519734][T28996] netlink_unicast+0x599/0x670 [ 1126.524510][T28996] netlink_sendmsg+0x5cc/0x6e0 [ 1126.529295][T28996] __sock_sendmsg+0x140/0x180 [ 1126.534026][T28996] __sys_sendto+0x1e5/0x260 [ 1126.538547][T28996] __x64_sys_sendto+0x78/0x90 [ 1126.543328][T28996] x64_sys_call+0x2959/0x2d60 [ 1126.548037][T28996] do_syscall_64+0xc9/0x1c0 [ 1126.552813][T28996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.558737][T28996] [ 1126.561076][T28996] read to 0xffff88811608ca10 of 1 bytes by task 28996 on cpu 0: [ 1126.568990][T28996] batadv_mcast_mla_update+0x21b/0x1700 [ 1126.574654][T28996] process_scheduled_works+0x483/0x9a0 [ 1126.580243][T28996] worker_thread+0x526/0x6e0 [ 1126.584889][T28996] kthread+0x1d1/0x210 [ 1126.588982][T28996] ret_from_fork+0x4b/0x60 [ 1126.593517][T28996] ret_from_fork_asm+0x1a/0x30 [ 1126.598308][T28996] [ 1126.600630][T28996] value changed: 0x02 -> 0x04 [ 1126.605310][T28996] [ 1126.607644][T28996] Reported by Kernel Concurrency Sanitizer on: [ 1126.613804][T28996] CPU: 0 UID: 0 PID: 28996 Comm: kworker/u8:1 Tainted: G W 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 1126.626242][T28996] Tainted: [W]=WARN [ 1126.630077][T28996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1126.640167][T28996] Workqueue: bat_events batadv_mcast_mla_update [ 1126.646710][T28996] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1126.663429][ T29] audit: type=1400 audit(1725952971.324:11055): avc: denied { write } for pid=3249 comm="syz-executor" path="pipe:[1609]" dev="pipefs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1127.081708][ T3350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.140601][ T3350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.201293][ T3350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.261428][ T3350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.335719][ T3350] bridge_slave_1: left allmulticast mode [ 1127.341440][ T3350] bridge_slave_1: left promiscuous mode [ 1127.347137][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.356014][ T3350] bridge_slave_0: left allmulticast mode [ 1127.361739][ T3350] bridge_slave_0: left promiscuous mode [ 1127.367451][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.469887][T31856] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1127.491124][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.501552][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.512060][ T3350] bond0 (unregistering): Released all slaves [ 1127.693492][ T3350] hsr_slave_0: left promiscuous mode [ 1127.699325][ T3350] hsr_slave_1: left promiscuous mode [ 1127.705169][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.712807][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.720730][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.728280][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.736901][ T3350] veth1_macvtap: left promiscuous mode [ 1127.742553][ T3350] veth0_macvtap: left promiscuous mode [ 1127.748119][ T3350] veth1_vlan: left promiscuous mode [ 1127.753374][ T3350] veth0_vlan: left promiscuous mode [ 1127.843558][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 1127.855206][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 1128.271622][ T3350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.351122][ T3350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.420483][ T3350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.490810][ T3350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.549913][ T3350] bridge_slave_1: left allmulticast mode [ 1128.555665][ T3350] bridge_slave_1: left promiscuous mode [ 1128.561477][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.569426][ T3350] bridge_slave_0: left allmulticast mode [ 1128.575104][ T3350] bridge_slave_0: left promiscuous mode [ 1128.580804][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.681043][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.691338][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.701589][ T3350] bond0 (unregistering): Released all slaves [ 1128.823361][ T3350] hsr_slave_0: left promiscuous mode [ 1128.829557][ T3350] hsr_slave_1: left promiscuous mode [ 1128.835344][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.842852][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.850513][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.858001][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.866995][ T3350] veth1_vlan: left promiscuous mode [ 1128.872265][ T3350] veth0_vlan: left promiscuous mode [ 1128.944154][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 1128.955515][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 1129.441989][T28996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.030586][T28996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.081034][T28996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.140362][T28996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.200515][T28996] bridge_slave_1: left allmulticast mode [ 1132.206182][T28996] bridge_slave_1: left promiscuous mode [ 1132.211996][T28996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.219754][T28996] bridge_slave_0: left allmulticast mode [ 1132.225460][T28996] bridge_slave_0: left promiscuous mode [ 1132.231110][T28996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.330896][T28996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.341210][T28996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.351766][T28996] bond0 (unregistering): Released all slaves [ 1132.503691][T28996] hsr_slave_0: left promiscuous mode [ 1132.509433][T28996] hsr_slave_1: left promiscuous mode [ 1132.515349][T28996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.522789][T28996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.531208][T28996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.539489][T28996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.548444][T28996] veth1_macvtap: left promiscuous mode [ 1132.554005][T28996] veth0_macvtap: left promiscuous mode [ 1132.559564][T28996] veth1_vlan: left promiscuous mode [ 1132.564846][T28996] veth0_vlan: left promiscuous mode [ 1132.641254][T28996] team0 (unregistering): Port device team_slave_1 removed [ 1132.651268][T28996] team0 (unregistering): Port device team_slave_0 removed