last executing test programs: 3.113001154s ago: executing program 1 (id=4318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\n\x00^ ', "614db575ffffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "74f0791e43127b1f", "20def070a4c036df3b5c20caa501809b", "f72cdcce", "dfbbdcbebf334654"}, 0x28) 2.987994455s ago: executing program 1 (id=4321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8923, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) 2.897620983s ago: executing program 1 (id=4323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2.651554887s ago: executing program 1 (id=4328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011"]}, 0x109) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 2.597514101s ago: executing program 1 (id=4331): pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095", @ANYRES64=0x0, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 2.509982159s ago: executing program 1 (id=4334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d80000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000dab989ab099e84d8b7e8d93600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r9+10000000}}, 0x0) timer_getoverrun(r8) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2.464640083s ago: executing program 3 (id=4338): io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000001f00)=""/4062, &(0x7f0000000040)=0xfde) 2.444983665s ago: executing program 3 (id=4340): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) write$binfmt_misc(r0, 0x0, 0x0) 2.266020562s ago: executing program 3 (id=4343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) 2.022155334s ago: executing program 3 (id=4347): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.018011955s ago: executing program 3 (id=4351): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) 1.95955779s ago: executing program 3 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d80000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000dab989ab099e84d8b7e8d93600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r9+10000000}}, 0x0) timer_getoverrun(r8) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 1.726014631s ago: executing program 2 (id=4365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)="a6", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000b00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0x0, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0}) bind$unix(r5, &(0x7f0000001000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x7, 0xd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x20, 0xc26a, 0xe294}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa1000000000042d9f3da3b8b3ddcc000070100669b6826a940a1db6e5519b300f8ffffffb702000008000000b70300"], &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0xf2, &(0x7f0000000d80)=""/242, 0x41000, 0x10, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x16318, r1, 0x5, &(0x7f0000000e80)=[r0], &(0x7f0000000ec0)=[{0x4, 0x2, 0x1, 0xa}, {0x2, 0x2, 0x5, 0xb}, {0x2, 0x4, 0x3, 0x5}, {0x0, 0x3, 0x10, 0x9}, {0x5, 0x4, 0x4, 0x9}], 0x10, 0x9, @void, @value}, 0x90) 1.237595076s ago: executing program 4 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r2) 1.150339514s ago: executing program 4 (id=4374): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4f56f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) 1.149974544s ago: executing program 4 (id=4375): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x14}, 0x80, 0x0}, 0x0) 1.133379776s ago: executing program 4 (id=4376): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) ptrace(0x10, r0) 1.013103077s ago: executing program 4 (id=4377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000880)=0x0) timer_gettime(r2, &(0x7f0000001580)) 929.367485ms ago: executing program 4 (id=4380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d80000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000dab989ab099e84d8b7e8d93600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r9+10000000}}, 0x0) timer_getoverrun(r8) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 771.800289ms ago: executing program 2 (id=4385): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 733.429633ms ago: executing program 2 (id=4387): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 702.261916ms ago: executing program 0 (id=4388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 698.334346ms ago: executing program 2 (id=4389): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000cd8000/0x4000)=nil, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0) vmsplice(r9, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000200)=0x4) write(r6, &(0x7f0000001100)="94", 0x1) tee(r5, r10, 0xaf5, 0x0) write$binfmt_script(r10, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r7, 0x0, 0x0) shutdown(r4, 0x1) setsockopt(r3, 0x84, 0x9, &(0x7f00000002c0)="1a00000002000000", 0x8) fsopen(&(0x7f0000000240)='ceph\x00', 0x1) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000040)) syz_read_part_table(0x1061, &(0x7f0000001080)="$eJzsz71NA0EUBODZ++E4iYASiCiCPhDlcCUQEVIAsZtxFc4tWWvdra4F28H3JbNvV5rVC3d16FvWOfldD2NSS7srU8u3bounkgy51JTh/dhelswZn//GvO7zVOYkXx/r9POyZKm120qTbv/zO/25ntayz//bbQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj+saAAD//3CcEQs=") 688.288297ms ago: executing program 0 (id=4390): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) 601.242885ms ago: executing program 0 (id=4391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 494.615565ms ago: executing program 0 (id=4392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000200)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x401}}]}, 0x45, 0x7ce, &(0x7f0000000500)="$eJzs3c9rHNcdAPDvrFY/7VYqlLYuFBYKrcF4Vbmq3UKhKj2UQg2G5JRDbLFaC0crrdGujCVEYhMCuQSSkFty8Tk/LyHX/IDkkvwfwcZJZBOHHILC7A9pJe/aK0faje3PB8Z6b+fNvPfdN/P2STOeDeCxlUv/yUQciYiXk4jxxutJRAzWUtmImXq5OxvrhXRJYnPzia+TWpnbG+uFaNkmdaiR+V1EfPxCxLHM3fVWVtcWZkul4vKObVfXjl9YnJ0vzheXTk5NT5849bdTJ/cv1m+/WDt845X//vmdme+f/+27L32SxEwcTuOr2Y5jv+Qi14hrMH0Ld/jPflfWN+8/20WhTMTmZj2ZPegGsQfpqTnQ6JUjMR4D9+qf0V62DAA4KM9FOjPrYKDjGgDgoZbUP///1e92AAC90vw7wO2N9UJz6e9fJHrr5r8jYqQef/P6Zn1NtnHNbqR2HXTsdrLjykgSERP7UH8uIt744Om30iV2XU8FOEhXrkbEuYncjvF/IGoj3O57FvbqL+1fnm/N5HatNP5B73yYzn/+3m7+l9ma/0Sb+c9wm3P3Qdz//M9c34dqOkrnf/9subftTkv8DRMDjdwvanO+weT8hVIxHdt+GRFHY3A4zU/Vy7a9Q+borR9udaq/df73zavPvJnWn/7cLpG5nh3euc3cbHX2p8bddPNqxO+z7eJPx//hWv8nHea/Z7qs43//ePH1TuvS+NN4m8vd8R+szWsRf2rb/8lWmTQ1WV28OFlpd3/iZO1wmGweFG28NxNjnerPZbf7P13S+pu/C/RC2v9j945/Imm9X7PS9a63zoXPr41/1KlQ6/HfPv72x/9Q8mQtPdR47fJstbo8FTGU/P/u109sb9vMN8un8R/9Y/vzvzn+tTn+n0r3f67LNyJ746u3Hzz+g5XGP7en/t9zIkbuLAx0qr+7/p/esU0341+3DXzQ9w0AAAAAAAAAAAAAAAAAAAAAAAAA9iITEYcjyeS30plMPl//Du9fx1imVK5Uj50vryzNpetqzz/NNB91Od7yPNSpxvPwm/kTu/J/jYhfRcRrw6O1fL5QLs31O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDjU4fv/U18O7yo80I8WAgAHYsQHOwA8bpJstt9NAAB6baTrkrmIGD3QtgAAvdH95z8A8Kjo/PnvwgAAPKru8/v/7v8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt15vTpdNn8bmO9kObnLq2uLJQvHZ8rVhbyiyuFfKG8fDE/Xy7Pl4r5Qnkxsh12dKX+o1QuX5yOpZXLk9VipTpZWV07u1heWaqevbA4O188WxzsYWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0K3K6trC5nipuJwmZksSPU4sfFbvh59LeyT2logr9f7b1z1/evIPv0l32tcAY2h7lBjty9gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD4MQAA//+KvR+l") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) 211.79777ms ago: executing program 0 (id=4393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_da_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) 98.785421ms ago: executing program 0 (id=4394): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x0, 0x1, 0xfffc}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0xf8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x1f, r3, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003380)=""/4096, 0x1000}, {0x0}], 0x2}, 0x20010000) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r1, r4, 0x0, 0x8000fffffffe) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfb36b7c5eda090f7, 0x0, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000600000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) pivot_root(&(0x7f0000000200)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000300)={0x1, 0x3, 0x1000}) 46.869156ms ago: executing program 2 (id=4395): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0xd8}) 0s ago: executing program 2 (id=4396): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)="a6", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000b00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0x0, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0}) bind$unix(r5, &(0x7f0000001000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x7, 0xd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x20, 0xc26a, 0xe294}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa1000000000042d9f3da3b8b3ddcc000070100669b6826a940a1db6e5519b300f8ffffffb702000008000000b70300"], &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0xf2, &(0x7f0000000d80)=""/242, 0x41000, 0x10, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x16318, r1, 0x5, &(0x7f0000000e80)=[r0], &(0x7f0000000ec0)=[{0x4, 0x2, 0x1, 0xa}, {0x2, 0x2, 0x5, 0xb}, {0x2, 0x4, 0x3, 0x5}, {0x0, 0x3, 0x10, 0x9}, {0x5, 0x4, 0x4, 0x9}], 0x10, 0x9, @void, @value}, 0x90) kernel console output (not intermixed with test programs): ed blocking state [ 185.287907][T23029] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.295185][T23029] bridge_slave_1: entered allmulticast mode [ 185.301678][T23029] bridge_slave_1: entered promiscuous mode [ 185.323328][T23029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.336271][T23029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.360207][T23029] team0: Port device team_slave_0 added [ 185.366955][T23029] team0: Port device team_slave_1 added [ 185.404241][T23364] loop4: detected capacity change from 0 to 512 [ 185.411156][T23364] EXT4-fs: Ignoring removed i_version option [ 185.418508][T23029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.425493][T23029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.451571][T23029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.451706][T23364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.463406][T23029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.479141][T23029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.505392][T23029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.519052][T23364] EXT4-fs (loop4): 1 truncate cleaned up [ 185.570462][T23029] hsr_slave_0: entered promiscuous mode [ 185.576770][T23029] hsr_slave_1: entered promiscuous mode [ 185.582803][T23029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.590595][T23029] Cannot create hsr debugfs directory [ 185.908461][T23029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.917791][T23029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.929419][T23029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.942296][T23029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.995174][T23029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.010417][T23029] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.026732][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.033884][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.068286][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.075511][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.169831][T23494] netlink: 'syz.2.3571': attribute type 3 has an invalid length. [ 186.193454][T23496] loop1: detected capacity change from 0 to 512 [ 186.199003][T23029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.214887][T23498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.223769][T23498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.237809][T23496] ext4 filesystem being mounted at /763/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.306201][T23029] veth0_vlan: entered promiscuous mode [ 186.323756][T23029] veth1_vlan: entered promiscuous mode [ 186.342313][T23029] veth0_macvtap: entered promiscuous mode [ 186.352040][T23029] veth1_macvtap: entered promiscuous mode [ 186.362268][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.372807][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.382704][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.393338][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.403307][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.413797][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.423625][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.434081][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.443959][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.454442][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.465377][T23029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.475702][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.486248][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.496102][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.506587][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.516529][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.527084][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.536994][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.547446][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.557278][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.567726][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.579907][T23029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.598006][T23029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.606790][T23029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.615626][T23029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.624701][T23029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.821681][T23537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.870780][T23547] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3581'. [ 186.880824][T23535] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3581'. [ 187.024185][T23576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.636863][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 187.636877][ T29] audit: type=1400 audit(1727705218.401:8557): avc: denied { egress } for pid=24 comm="kworker/1:0" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 187.666659][ T29] audit: type=1400 audit(1727705218.401:8558): avc: denied { sendto } for pid=24 comm="kworker/1:0" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 187.709753][ T29] audit: type=1400 audit(1727705218.457:8559): avc: denied { read write } for pid=20875 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.733265][ T29] audit: type=1400 audit(1727705218.457:8560): avc: denied { open } for pid=20875 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.756672][ T29] audit: type=1400 audit(1727705218.457:8561): avc: denied { ioctl } for pid=20875 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1154 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.781920][ T29] audit: type=1400 audit(1727705218.485:8562): avc: denied { create } for pid=23637 comm="syz.0.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.801762][ T29] audit: type=1400 audit(1727705218.485:8563): avc: denied { connect } for pid=23637 comm="syz.0.3611" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.822380][ T29] audit: type=1400 audit(1727705218.485:8564): avc: denied { write } for pid=23637 comm="syz.0.3611" laddr=fe80::84fb:c7ff:fedd:adec lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.846816][ T29] audit: type=1326 audit(1727705218.494:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23640 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 187.870369][ T29] audit: type=1326 audit(1727705218.494:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23640 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 187.918674][T23650] loop0: detected capacity change from 0 to 512 [ 187.934754][T23628] loop3: detected capacity change from 0 to 8192 [ 187.952910][T23650] EXT4-fs (loop0): orphan cleanup on readonly fs [ 187.959838][T23650] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 187.975109][T23650] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 187.982091][T23650] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3614: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 188.001119][T23650] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.3614: couldn't read orphan inode 13 (err -117) [ 188.017403][T23628] loop3: p2 p3 p4 [ 188.021364][T23628] loop3: p2 start 14935 is beyond EOD, truncated [ 188.031479][T23650] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 188.041197][T23628] loop3: p4 start 4026530307 is beyond EOD, truncated [ 188.047399][T23663] veth0_to_bridge: entered promiscuous mode [ 188.056714][T23662] veth0_to_bridge: left promiscuous mode [ 188.126603][T23650] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 188.225419][T23691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.241999][T23693] loop4: detected capacity change from 0 to 2048 [ 188.248998][T23695] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3628'. [ 188.267843][T23681] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3628'. [ 188.378404][T23720] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.388072][T23720] TCP: tcp_parse_options: Illegal window scaling value 15 > 14 received [ 188.426268][T23714] loop2: detected capacity change from 0 to 512 [ 188.464834][T23714] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.508722][T23741] loop0: detected capacity change from 0 to 128 [ 188.523241][T23741] tmpfs: Unknown parameter 'errors' [ 188.812041][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.864332][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.918192][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.973363][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.060586][ T28] bridge_slave_1: left allmulticast mode [ 189.066258][ T28] bridge_slave_1: left promiscuous mode [ 189.072117][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.100780][ T28] bridge_slave_0: left allmulticast mode [ 189.106468][ T28] bridge_slave_0: left promiscuous mode [ 189.112214][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.242215][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.252843][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.263377][ T28] bond0 (unregistering): Released all slaves [ 189.271078][T23796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 189.306816][ T28] tipc: Disabling bearer [ 189.312063][ T28] tipc: Left network mode [ 189.321064][ T28] hsr_slave_0: left promiscuous mode [ 189.330594][T23805] loop3: detected capacity change from 0 to 512 [ 189.337046][ T28] hsr_slave_1: left promiscuous mode [ 189.343260][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.350796][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.354110][T23805] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.369101][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.376541][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.386710][ T28] veth1_macvtap: left promiscuous mode [ 189.392257][ T28] veth0_macvtap: left promiscuous mode [ 189.397948][ T28] veth1_vlan: left promiscuous mode [ 189.403419][ T28] veth0_vlan: left promiscuous mode [ 189.553956][ T28] team0 (unregistering): Port device team_slave_1 removed [ 189.565628][ T28] team0 (unregistering): Port device team_slave_0 removed [ 189.586881][T23824] loop4: detected capacity change from 0 to 512 [ 189.594067][T23824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.610026][T23824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3670: bg 0: block 264: padding at end of block bitmap is not set [ 189.679618][T23824] EXT4-fs (loop4): Remounting filesystem read-only [ 189.699791][T23790] chnl_net:caif_netlink_parms(): no params data found [ 189.703202][T23824] EXT4-fs (loop4): 1 truncate cleaned up [ 189.714529][T23824] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 189.772824][T23790] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.779897][T23790] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.788292][T23790] bridge_slave_0: entered allmulticast mode [ 189.795218][T23790] bridge_slave_0: entered promiscuous mode [ 189.804306][T23790] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.811428][T23790] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.818588][T23790] bridge_slave_1: entered allmulticast mode [ 189.825554][T23790] bridge_slave_1: entered promiscuous mode [ 189.858934][T23790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.879879][T23790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.915531][T23790] team0: Port device team_slave_0 added [ 189.922120][T23790] team0: Port device team_slave_1 added [ 189.930508][T24064] loop4: detected capacity change from 0 to 128 [ 189.950581][T24064] tmpfs: Unknown parameter 'errors' [ 189.966312][T23790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.973337][T23790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.999293][T23790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.053149][T23790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.060194][T23790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.086153][T23790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.158397][T23790] hsr_slave_0: entered promiscuous mode [ 190.165666][T23790] hsr_slave_1: entered promiscuous mode [ 190.171776][T23790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.179326][T23790] Cannot create hsr debugfs directory [ 190.437969][T24210] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 190.499044][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 190.511056][T24035] loop3: detected capacity change from 0 to 8192 [ 190.551055][T24035] loop3: p2 p3 p4 [ 190.554868][T24035] loop3: p2 start 14935 is beyond EOD, truncated [ 190.563148][T24035] loop3: p4 start 4026530307 is beyond EOD, truncated [ 190.666827][T23790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.683257][T23790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.692416][T23790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.702068][T23790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.753608][T24266] random: crng reseeded on system resumption [ 190.807101][T23790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.846795][T23790] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.863200][T24293] loop2: detected capacity change from 0 to 256 [ 190.870151][T24293] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.884167][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.891325][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.901331][T24293] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.930211][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.937418][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.952727][T24235] chnl_net:caif_netlink_parms(): no params data found [ 190.991438][T23790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.001907][T23790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.059220][T24235] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.066374][T24235] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.073929][T24235] bridge_slave_0: entered allmulticast mode [ 191.080464][T24235] bridge_slave_0: entered promiscuous mode [ 191.087863][T24235] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.094977][T24235] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.102227][T24235] bridge_slave_1: entered allmulticast mode [ 191.108714][T24235] bridge_slave_1: entered promiscuous mode [ 191.135361][T24235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.158693][T23790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.168002][T24235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.226513][T24235] team0: Port device team_slave_0 added [ 191.234269][T24235] team0: Port device team_slave_1 added [ 191.276553][T24235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.283744][T24235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.309798][T24235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.348059][T23790] veth0_vlan: entered promiscuous mode [ 191.359849][T24235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.366868][T24235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.392925][T24235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.414382][T23790] veth1_vlan: entered promiscuous mode [ 191.456508][T23790] veth0_macvtap: entered promiscuous mode [ 191.473807][T23790] veth1_macvtap: entered promiscuous mode [ 191.483176][T24235] hsr_slave_0: entered promiscuous mode [ 191.489404][T24235] hsr_slave_1: entered promiscuous mode [ 191.498495][T24235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.514377][T24235] Cannot create hsr debugfs directory [ 191.524969][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.535541][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.545439][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.555930][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.565829][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.577087][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.587125][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.597585][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.607409][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.617856][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.629590][T23790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.657292][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.667909][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.677785][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.688429][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.698465][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.708961][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.718830][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.729434][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.739367][T23790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.749856][T23790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.819336][T23790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.849690][T23790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.856028][T24448] loop3: detected capacity change from 0 to 8192 [ 191.858449][T23790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.873596][T23790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.882279][T23790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.925723][T24235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.936108][T24235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.949417][T24448] loop3: p2 p3 p4 [ 191.953296][T24448] loop3: p2 start 14935 is beyond EOD, truncated [ 191.961705][T24448] loop3: p4 start 4026530307 is beyond EOD, truncated [ 192.016871][T24235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.027303][T24235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.112685][T24235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.123070][T24235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.186718][T24235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.197134][T24235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.228312][T24687] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 192.238576][T24691] loop3: detected capacity change from 0 to 128 [ 192.245311][T24691] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.257965][T24691] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.292561][ T28] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.305763][T24235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.331867][T24235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.372149][T24235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.390875][T24235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.402867][T24721] IPVS: Error joining to the multicast group [ 192.453917][T24235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.467032][T24235] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.483968][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.491080][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.504689][ T1519] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.511819][ T1519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.656803][T24235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.848309][T24235] veth0_vlan: entered promiscuous mode [ 192.865558][T24235] veth1_vlan: entered promiscuous mode [ 192.887915][T24235] veth0_macvtap: entered promiscuous mode [ 192.898542][T24235] veth1_macvtap: entered promiscuous mode [ 192.910644][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.921279][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.931165][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.937211][T24709] loop3: detected capacity change from 0 to 8192 [ 192.941609][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.957875][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.968398][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.978306][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.988880][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.998732][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.009176][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.019010][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.029500][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.042232][T24235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.057357][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.066185][T24709] loop3: p2 p3 p4 [ 193.067891][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.075863][T24709] loop3: p2 start 14935 is beyond EOD, [ 193.081299][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.081320][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.081332][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.081345][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.081357][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.086925][T24709] truncated [ 193.097352][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.097371][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.112535][T24709] loop3: p4 start 4026530307 is beyond EOD, [ 193.117546][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.127388][T24709] truncated [ 193.137917][T24235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.190691][T24235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.206002][T24235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.219951][T24235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.228740][T24235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.237495][T24235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.246230][T24235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.261434][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 193.261446][ T29] audit: type=1400 audit(1727705223.589:8856): avc: denied { create } for pid=24822 comm="syz.0.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.292286][ T29] audit: type=1400 audit(1727705223.616:8857): avc: denied { write } for pid=24822 comm="syz.0.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.344545][ T29] audit: type=1400 audit(1727705223.663:8858): avc: denied { sqpoll } for pid=24829 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.368156][ T29] audit: type=1400 audit(1727705223.681:8859): avc: denied { create } for pid=24829 comm="syz.0.3727" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.389651][ T29] audit: type=1400 audit(1727705223.681:8860): avc: denied { map } for pid=24829 comm="syz.0.3727" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.414106][ T29] audit: type=1400 audit(1727705223.681:8861): avc: denied { read write } for pid=24829 comm="syz.0.3727" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.414712][ T8] kernel write not supported for file /cpu/0/msr (pid: 8 comm: kworker/0:0) [ 193.439019][ T29] audit: type=1400 audit(1727705223.718:8862): avc: denied { read } for pid=24837 comm="syz.3.3728" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.439054][ T29] audit: type=1400 audit(1727705223.718:8863): avc: denied { open } for pid=24837 comm="syz.3.3728" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.494357][ T29] audit: type=1400 audit(1727705223.727:8864): avc: denied { write } for pid=24837 comm="syz.3.3728" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.517189][ T29] audit: type=1400 audit(1727705223.764:8865): avc: denied { create } for pid=24830 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.542290][T24841] loop3: detected capacity change from 0 to 512 [ 193.548788][T24841] EXT4-fs: Ignoring removed i_version option [ 193.555610][T24841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.567995][T24841] EXT4-fs (loop3): 1 truncate cleaned up [ 194.290912][T24869] loop0: detected capacity change from 0 to 8192 [ 194.346879][T24869] loop0: p2 p3 p4 [ 194.350747][T24869] loop0: p2 start 14935 is beyond EOD, truncated [ 194.358685][T24869] loop0: p4 start 4026530307 is beyond EOD, truncated [ 194.483004][T24920] loop0: detected capacity change from 0 to 512 [ 194.490316][T24920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.515767][T24922] loop1: detected capacity change from 0 to 512 [ 194.519249][T24920] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.523555][T24922] EXT4-fs: Ignoring removed i_version option [ 194.539616][T24922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.542493][T24920] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 194.564199][T24920] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 194.565177][T24922] EXT4-fs (loop1): 1 truncate cleaned up [ 194.576424][T24920] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.576424][T24920] [ 194.576483][T24920] EXT4-fs (loop0): Total free blocks count 0 [ 194.597943][T24920] EXT4-fs (loop0): Free/Dirty block details [ 194.603885][T24920] EXT4-fs (loop0): free_blocks=39626 [ 194.609295][T24920] EXT4-fs (loop0): dirty_blocks=1 [ 194.614537][T24920] EXT4-fs (loop0): Block reservation details [ 194.620537][T24920] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 194.657143][T24933] loop4: detected capacity change from 0 to 512 [ 194.679679][T24933] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.697715][T24933] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 194.714100][T24933] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 195.545506][T24980] loop4: detected capacity change from 0 to 512 [ 195.552072][T24980] EXT4-fs: Ignoring removed i_version option [ 195.558815][T24980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.570863][T24980] EXT4-fs (loop4): 1 truncate cleaned up [ 195.603527][T24991] loop3: detected capacity change from 0 to 512 [ 195.610486][T24991] EXT4-fs: Ignoring removed i_version option [ 195.617858][T24991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.629365][T24991] EXT4-fs (loop3): 1 truncate cleaned up [ 195.763493][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.774290][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.810938][ T6206] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 195.818671][ T6206] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 195.830583][ T6206] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 195.841511][ T6206] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 195.950104][T25035] loop0: detected capacity change from 0 to 512 [ 195.959044][T25035] EXT4-fs: Ignoring removed i_version option [ 195.969892][T25035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.993539][T25035] EXT4-fs (loop0): 1 truncate cleaned up [ 196.218691][T25045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3780'. [ 196.359345][T25054] syz.2.3784[25054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.359539][T25054] syz.2.3784[25054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.371191][T25054] syz.2.3784[25054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.384784][T25054] syz.2.3784: attempt to access beyond end of device [ 196.384784][T25054] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 196.621974][T25073] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3790'. [ 196.639782][T25073] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 196.712391][T25079] syz.3.3793[25079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.712512][T25079] syz.3.3793[25079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.724374][T25079] syz.3.3793[25079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.772821][T25082] 9pnet_fd: Insufficient options for proto=fd [ 196.829279][T25086] loop3: detected capacity change from 0 to 512 [ 196.836829][T25086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.859955][T25086] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.875524][T25086] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 196.890398][T25086] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 196.902691][T25086] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.902691][T25086] [ 196.912513][T25086] EXT4-fs (loop3): Total free blocks count 0 [ 196.918545][T25086] EXT4-fs (loop3): Free/Dirty block details [ 196.924583][T25086] EXT4-fs (loop3): free_blocks=39626 [ 196.929892][T25086] EXT4-fs (loop3): dirty_blocks=1 [ 196.934929][T25086] EXT4-fs (loop3): Block reservation details [ 196.940906][T25086] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 197.003085][T25103] loop0: detected capacity change from 0 to 512 [ 197.009802][T25103] EXT4-fs: Ignoring removed i_version option [ 197.016181][T25103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.027815][T25103] EXT4-fs (loop0): 1 truncate cleaned up [ 197.092625][T25061] loop2: detected capacity change from 0 to 8192 [ 197.161112][T25061] loop2: p2 p3 p4 [ 197.165027][T25061] loop2: p2 start 14935 is beyond EOD, truncated [ 197.176477][T25061] loop2: p4 start 4026530307 is beyond EOD, truncated [ 197.291622][T25129] loop4: detected capacity change from 0 to 512 [ 197.298257][T25129] EXT4-fs: Ignoring removed i_version option [ 197.305903][T25129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.337115][T25129] EXT4-fs (loop4): 1 truncate cleaned up [ 197.553747][T25149] loop2: detected capacity change from 0 to 512 [ 197.561013][T25149] journal_path: Lookup failure for './file0' [ 197.567036][T25149] EXT4-fs: error: could not find journal device path [ 197.680911][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 197.688585][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 197.701443][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 197.711705][ T35] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 197.998664][T25188] loop0: detected capacity change from 0 to 512 [ 198.005390][T25188] EXT4-fs: Ignoring removed i_version option [ 198.012213][T25188] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 198.031503][T25188] EXT4-fs (loop0): 1 truncate cleaned up [ 198.113006][T25144] loop3: detected capacity change from 0 to 8192 [ 198.157968][T25144] loop3: p2 p3 p4 [ 198.161832][T25144] loop3: p2 start 14935 is beyond EOD, truncated [ 198.173320][T25144] loop3: p4 start 4026530307 is beyond EOD, truncated [ 198.250820][T24235] EXT4-fs unmount: 36 callbacks suppressed [ 198.250837][T24235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.374653][T25211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.446442][T25211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.518632][T25211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.604295][T25211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.659817][T25238] loop2: detected capacity change from 0 to 512 [ 198.667783][T25238] EXT4-fs: Ignoring removed i_version option [ 198.679180][T25238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.679591][T25211] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.700373][T25211] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.711551][T25211] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.712402][T25238] EXT4-fs (loop2): 1 truncate cleaned up [ 198.722833][T25211] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.734210][T25238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.825958][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 198.825972][ T29] audit: type=1326 audit(1727705228.721:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.855945][ T29] audit: type=1326 audit(1727705228.721:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.879592][ T29] audit: type=1326 audit(1727705228.721:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.903091][ T29] audit: type=1326 audit(1727705228.721:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.926645][ T29] audit: type=1326 audit(1727705228.721:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.950321][ T29] audit: type=1326 audit(1727705228.721:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.974049][ T29] audit: type=1326 audit(1727705228.721:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 198.997663][ T29] audit: type=1326 audit(1727705228.721:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 199.021324][ T29] audit: type=1326 audit(1727705228.721:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 199.044968][ T29] audit: type=1326 audit(1727705228.721:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25237 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 199.079288][T23790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.429630][T25251] loop3: detected capacity change from 0 to 8192 [ 199.501566][T25251] loop3: p2 p3 p4 [ 199.505606][T25251] loop3: p2 start 14935 is beyond EOD, truncated [ 199.513376][T25251] loop3: p4 start 4026530307 is beyond EOD, truncated [ 199.610631][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.634279][T25259] loop0: detected capacity change from 0 to 8192 [ 199.662726][T25259] loop0: p2 p3 p4 [ 199.665579][T25281] loop4: detected capacity change from 0 to 2048 [ 199.666538][T25259] loop0: p2 start 14935 is beyond EOD, truncated [ 199.681599][T25259] loop0: p4 start 4026530307 is beyond EOD, truncated [ 199.687076][T25281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.701882][T25284] loop2: detected capacity change from 0 to 512 [ 199.717968][T25281] EXT4-fs (loop4): shut down requested (0) [ 199.724907][T25284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.741990][T25284] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.772509][T24235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.789520][T25284] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 199.826285][T25284] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 199.859505][T25310] 9pnet_fd: Insufficient options for proto=fd [ 199.875312][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.102553][T25350] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.117949][T25350] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 200.251365][T25365] loop3: detected capacity change from 0 to 512 [ 200.257901][T25365] journal_path: Lookup failure for './file0' [ 200.264048][T25365] EXT4-fs: error: could not find journal device path [ 200.384481][T25385] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25385 comm=syz.3.3871 [ 200.412221][T25387] loop3: detected capacity change from 0 to 256 [ 200.466255][T25345] loop2: detected capacity change from 0 to 8192 [ 200.518928][T25345] loop2: p2 p3 p4 [ 200.522717][T25345] loop2: p2 start 14935 is beyond EOD, truncated [ 200.532357][T25345] loop2: p4 start 4026530307 is beyond EOD, truncated [ 200.645493][T25418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25418 comm=syz.0.3884 [ 200.677442][T25426] loop0: detected capacity change from 0 to 512 [ 200.684047][T25426] EXT4-fs: Ignoring removed bh option [ 200.704399][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 200.712608][T25426] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.3886: invalid block [ 200.713432][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 200.736068][T25426] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.3886: couldn't read orphan inode 15 (err -117) [ 200.754946][T25426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.786717][T25451] loop3: detected capacity change from 0 to 512 [ 200.794210][T25451] EXT4-fs: Ignoring removed i_version option [ 200.801776][T25451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.813971][T23790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.830781][T25451] EXT4-fs (loop3): 1 truncate cleaned up [ 200.837040][T25451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.094662][ T35] kernel write not supported for file /input/event0 (pid: 35 comm: kworker/1:1) [ 201.133256][T25500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3902'. [ 201.177274][T25504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3903'. [ 201.186358][T25504] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3903'. [ 201.358160][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 201.450635][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 201.552521][T25533] bond0: entered promiscuous mode [ 201.557680][T25533] bond_slave_0: entered promiscuous mode [ 201.563534][T25533] bond_slave_1: entered promiscuous mode [ 201.611413][T25537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.705311][T25537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.717210][T23029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.737847][T25550] batman_adv: batadv0: Adding interface: gretap1 [ 201.744277][T25550] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.769991][T25550] batman_adv: batadv0: Interface activated: gretap1 [ 201.780937][T25537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.843314][T25537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.902031][T25537] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.913425][T25537] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.924817][T25537] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.935853][T25537] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.577847][T25617] loop0: detected capacity change from 0 to 512 [ 202.584430][T25617] EXT4-fs: Ignoring removed i_version option [ 202.590781][T25617] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.602187][T25617] EXT4-fs (loop0): 1 truncate cleaned up [ 202.608340][T25617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.940553][T25625] loop3: detected capacity change from 0 to 2048 [ 202.948536][T25580] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 202.957550][T25580] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 202.977948][T25625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.996382][T25625] EXT4-fs (loop3): shut down requested (0) [ 203.027260][T23029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.451605][T25642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3928'. [ 203.531224][T23790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.048179][T25680] loop0: detected capacity change from 0 to 8192 [ 204.093917][T25680] loop0: p2 p3 p4 [ 204.097792][T25680] loop0: p2 start 14935 is beyond EOD, truncated [ 204.104737][T25680] loop0: p4 start 4026530307 is beyond EOD, truncated [ 204.213266][T25717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3942'. [ 204.237686][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 204.278736][T25723] loop0: detected capacity change from 0 to 512 [ 204.285296][T25723] EXT4-fs: Ignoring removed i_version option [ 204.291850][T25723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.303137][T25723] EXT4-fs (loop0): 1 truncate cleaned up [ 204.309184][T25723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.355596][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 204.355662][ T29] audit: type=1326 audit(1727705233.834:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.387677][ T29] audit: type=1326 audit(1727705233.834:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.411356][ T29] audit: type=1326 audit(1727705233.834:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.434865][ T29] audit: type=1326 audit(1727705233.834:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.458429][ T29] audit: type=1326 audit(1727705233.834:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.476994][T25732] usb usb3: check_ctrlrecip: process 25732 (syz.3.3948) requesting ep 01 but needs 81 [ 204.481948][ T29] audit: type=1326 audit(1727705233.834:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.515024][ T29] audit: type=1326 audit(1727705233.834:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.538520][ T29] audit: type=1326 audit(1727705233.843:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.562036][ T29] audit: type=1326 audit(1727705233.843:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.585801][ T29] audit: type=1326 audit(1727705233.843:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.2.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f9ba46ddff9 code=0x7ffc0000 [ 204.631259][T25741] 9pnet_fd: Insufficient options for proto=fd [ 204.721389][T25751] SELinux: security_context_str_to_sid (BA\) failed with errno=-22 [ 204.749181][T23790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.788191][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'. [ 204.828886][T25765] syz.0.3960[25765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.828944][T25765] syz.0.3960[25765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.840602][T25765] syz.0.3960[25765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.963853][T25790] loop0: detected capacity change from 0 to 1024 [ 204.982081][T25790] EXT4-fs: Ignoring removed i_version option [ 204.995279][T25790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.009436][T25790] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 205.024461][T25790] EXT4-fs (loop0): Remounting filesystem read-only [ 205.031371][T25790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 205.038175][T25796] loop3: detected capacity change from 0 to 2048 [ 205.040257][T25790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 205.078889][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.087878][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.096860][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.105673][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.115407][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.124280][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.133492][T23790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 205.226122][T25816] loop3: detected capacity change from 0 to 512 [ 205.254418][T25816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.267103][T25816] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.287431][T23029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.306310][T25822] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 205.316713][T25822] gretap2: entered promiscuous mode [ 205.321945][T25822] gretap2: entered allmulticast mode [ 205.374150][T23790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.387007][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.451451][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.528181][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.570219][T25828] chnl_net:caif_netlink_parms(): no params data found [ 205.595518][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.623079][T25828] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.630146][T25828] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.637582][T25828] bridge_slave_0: entered allmulticast mode [ 205.644546][T25828] bridge_slave_0: entered promiscuous mode [ 205.651367][T25828] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.658507][T25828] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.665846][T25828] bridge_slave_1: entered allmulticast mode [ 205.672336][T25828] bridge_slave_1: entered promiscuous mode [ 205.692122][T25828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.702950][T25828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.729321][T25828] team0: Port device team_slave_0 added [ 205.738468][T25828] team0: Port device team_slave_1 added [ 205.758750][ T57] bridge_slave_1: left allmulticast mode [ 205.764573][ T57] bridge_slave_1: left promiscuous mode [ 205.770411][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.778060][ T57] bridge_slave_0: left allmulticast mode [ 205.783906][ T57] bridge_slave_0: left promiscuous mode [ 205.789658][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.905137][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.915736][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.926503][ T57] bond0 (unregistering): Released all slaves [ 205.935068][T25828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.942137][T25828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.968132][T25828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.983257][T25828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.990408][T25828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.016445][T25828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.033588][T26076] netlink: 'syz.2.3987': attribute type 10 has an invalid length. [ 206.041716][T26076] geneve1: entered promiscuous mode [ 206.050491][T26076] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 206.081352][ T57] hsr_slave_0: left promiscuous mode [ 206.087520][ T57] hsr_slave_1: left promiscuous mode [ 206.093615][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.101137][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.108930][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.116530][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.126188][ T57] veth1_macvtap: left promiscuous mode [ 206.132178][ T57] veth0_macvtap: left promiscuous mode [ 206.137731][ T57] veth1_vlan: left promiscuous mode [ 206.142981][ T57] veth0_vlan: left promiscuous mode [ 206.229851][ T57] team0 (unregistering): Port device team_slave_1 removed [ 206.240386][ T57] team0 (unregistering): Port device team_slave_0 removed [ 206.279394][T25828] hsr_slave_0: entered promiscuous mode [ 206.285734][T25828] hsr_slave_1: entered promiscuous mode [ 206.291750][T25828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.299464][T25828] Cannot create hsr debugfs directory [ 206.376700][T26175] loop2: detected capacity change from 0 to 512 [ 206.383266][T26175] EXT4-fs: Ignoring removed i_version option [ 206.389660][T26175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.412208][T26175] EXT4-fs (loop2): 1 truncate cleaned up [ 206.418200][T26175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.703398][T25828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.712553][T25828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.722455][T25828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.734765][T25828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.800912][T25828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.828521][T25828] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.837858][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.844982][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.874296][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.881398][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.980095][T25828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.091226][T25828] veth0_vlan: entered promiscuous mode [ 207.102405][T25828] veth1_vlan: entered promiscuous mode [ 207.112623][T26221] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3994'. [ 207.116918][T25828] veth0_macvtap: entered promiscuous mode [ 207.133013][T25828] veth1_macvtap: entered promiscuous mode [ 207.143886][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.154395][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.164258][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.174850][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.184781][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.195300][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.205146][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.215620][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.225448][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.235929][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.245747][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.256223][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.266826][T25828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.279376][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.289864][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.299712][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.310301][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.320222][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.330760][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.340599][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.351069][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.360919][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.371364][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.381199][T25828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.391697][T25828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.403773][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.411866][T25828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.421413][T25828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.430389][T25828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.439160][T25828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.448038][T25828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.519496][T26251] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.600882][T26286] loop0: detected capacity change from 0 to 256 [ 207.614014][ T2142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.626404][T26286] FAT-fs (loop0): Directory bread(block 64) failed [ 207.632980][T26286] FAT-fs (loop0): Directory bread(block 65) failed [ 207.645570][T26286] FAT-fs (loop0): Directory bread(block 66) failed [ 207.646030][T26294] tipc: Started in network mode [ 207.652300][T26286] FAT-fs (loop0): Directory bread(block 67) failed [ 207.657034][T26294] tipc: Node identity 7f000001, cluster identity 4711 [ 207.663717][T26286] FAT-fs (loop0): Directory bread(block 68) failed [ 207.671300][T26294] tipc: Enabled bearer , priority 10 [ 207.678458][T26286] FAT-fs (loop0): Directory bread(block 69) failed [ 207.692407][T26286] FAT-fs (loop0): Directory bread(block 70) failed [ 207.699454][T26286] FAT-fs (loop0): Directory bread(block 71) failed [ 207.708118][T26286] FAT-fs (loop0): Directory bread(block 72) failed [ 207.710211][T26231] chnl_net:caif_netlink_parms(): no params data found [ 207.714923][T26286] FAT-fs (loop0): Directory bread(block 73) failed [ 207.740085][ T2142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.759574][T26286] syz.0.4003: attempt to access beyond end of device [ 207.759574][T26286] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 207.773752][T26286] syz.0.4003: attempt to access beyond end of device [ 207.773752][T26286] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 207.806183][ T2142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.830660][T26387] loop2: detected capacity change from 0 to 256 [ 207.838019][T26387] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.853948][T26387] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.888616][ T2142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.900203][T26231] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.907370][T26231] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.915521][T26231] bridge_slave_0: entered allmulticast mode [ 207.926390][T26231] bridge_slave_0: entered promiscuous mode [ 207.933524][T26231] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.933524][T26432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 207.941792][T26231] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.948189][T26432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.957678][T26231] bridge_slave_1: entered allmulticast mode [ 207.962771][T26432] vhci_hcd vhci_hcd.0: Device attached [ 207.969972][T26231] bridge_slave_1: entered promiscuous mode [ 207.984369][T26433] vhci_hcd: connection closed [ 207.989176][ T50] vhci_hcd: stop threads [ 207.998167][ T50] vhci_hcd: release socket [ 208.002647][ T50] vhci_hcd: disconnect device [ 208.024694][T26231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.036150][T26231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.073825][T26231] team0: Port device team_slave_0 added [ 208.080524][T26231] team0: Port device team_slave_1 added [ 208.094703][ T2142] bridge_slave_1: left allmulticast mode [ 208.100420][ T2142] bridge_slave_1: left promiscuous mode [ 208.106152][ T2142] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.120218][ T2142] bridge_slave_0: left allmulticast mode [ 208.126115][ T2142] bridge_slave_0: left promiscuous mode [ 208.131783][ T2142] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.375782][ T2142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.386210][ T2142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.396975][ T2142] bond0 (unregistering): Released all slaves [ 208.405535][ T2142] bond1 (unregistering): Released all slaves [ 208.419770][T26231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.426754][T26231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.452766][T26231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.469511][T26231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.476585][T26231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.491965][T26534] loop2: detected capacity change from 0 to 512 [ 208.502585][T26231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.511012][T26534] EXT4-fs: Ignoring removed i_version option [ 208.529551][T26534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.544209][T26534] EXT4-fs (loop2): 1 truncate cleaned up [ 208.558024][T26534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.559251][ T2142] tipc: Left network mode [ 208.585245][T26231] hsr_slave_0: entered promiscuous mode [ 208.597164][T26231] hsr_slave_1: entered promiscuous mode [ 208.604345][T26231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.614871][T26231] Cannot create hsr debugfs directory [ 208.624148][ T2142] hsr_slave_0: left promiscuous mode [ 208.630015][ T2142] hsr_slave_1: left promiscuous mode [ 208.635917][ T2142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.643399][ T2142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.651583][ T2142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.659110][ T2142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.669167][ T2142] veth1_vlan: left promiscuous mode [ 208.674425][ T2142] veth0_vlan: left allmulticast mode [ 208.679862][ T2142] veth0_vlan: left promiscuous mode [ 208.752356][ T992] tipc: Node number set to 2130706433 [ 208.764909][ T2142] team0 (unregistering): Port device team_slave_1 removed [ 208.778422][ T2142] team0 (unregistering): Port device team_slave_0 removed [ 208.904264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.225691][ T2142] IPVS: stop unused estimator thread 0... [ 209.285895][T26231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.295858][T26231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.305949][T26231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.314718][T26231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.358802][T26231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.377915][T26231] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.387630][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.394715][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.417450][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.424584][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.434626][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.507956][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'. [ 209.530062][T26231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.573188][T26681] loop0: detected capacity change from 0 to 512 [ 209.580256][T26681] EXT4-fs: Ignoring removed i_version option [ 209.588436][T26681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.600467][T26685] loop2: detected capacity change from 0 to 512 [ 209.607063][T26685] EXT4-fs: Ignoring removed bh option [ 209.612813][T26685] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 209.622806][T26681] EXT4-fs (loop0): 1 truncate cleaned up [ 209.629065][T26681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.629178][T26231] veth0_vlan: entered promiscuous mode [ 209.654443][T26231] veth1_vlan: entered promiscuous mode [ 209.660732][T26685] EXT4-fs (loop2): 1 truncate cleaned up [ 209.670138][T26685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.700108][T26231] veth0_macvtap: entered promiscuous mode [ 209.719477][T26231] veth1_macvtap: entered promiscuous mode [ 209.727603][T26685] loop2: detected capacity change from 512 to 64 [ 209.750605][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.750793][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.761162][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.761178][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.790519][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.800387][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.810863][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.820854][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.831313][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.841154][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.851732][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.861579][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.872095][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.886870][T26231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.899333][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.901901][T26698] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4024'. [ 209.909835][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.928782][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.939270][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.949131][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.959651][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.969492][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.980012][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.989879][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.000348][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.010239][T26231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.021160][T26231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.037747][T26231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.066567][T26231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.075420][T26231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.084137][T26231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.093040][T26231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.114998][T26707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'. [ 210.159165][T26709] loop2: detected capacity change from 0 to 512 [ 210.199134][T26709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.227023][T26709] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.302873][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.311921][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 210.311936][ T29] audit: type=1326 audit(1727705239.326:9575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.341835][ T29] audit: type=1326 audit(1727705239.326:9576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.365480][ T29] audit: type=1326 audit(1727705239.326:9577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.389227][ T29] audit: type=1326 audit(1727705239.326:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.412716][ T29] audit: type=1326 audit(1727705239.326:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.436411][ T29] audit: type=1326 audit(1727705239.326:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.460205][ T29] audit: type=1326 audit(1727705239.326:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.483761][ T29] audit: type=1326 audit(1727705239.326:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.507466][ T29] audit: type=1326 audit(1727705239.326:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.531060][ T29] audit: type=1326 audit(1727705239.326:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f29718cdff9 code=0x7ffc0000 [ 210.583701][T25828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.589552][T26725] syz.2.4031[26725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.592908][T26725] syz.2.4031[26725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.604429][T26725] syz.2.4031[26725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.398217][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4038'. [ 211.481301][T26762] sctp: [Deprecated]: syz.4.4045 (pid 26762) Use of int in max_burst socket option. [ 211.481301][T26762] Use struct sctp_assoc_value instead [ 211.550831][T26768] loop4: detected capacity change from 0 to 2048 [ 211.626853][T26792] loop2: detected capacity change from 0 to 512 [ 211.635107][T26790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4056'. [ 211.649434][T26792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.662092][T26792] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.663765][T26800] loop0: detected capacity change from 0 to 512 [ 211.674132][T26792] syz.2.4057[26792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.679056][T26792] syz.2.4057[26792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.679301][T26800] EXT4-fs: Ignoring removed i_version option [ 211.697788][T26792] syz.2.4057[26792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.708782][T26800] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.730355][T26798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4059'. [ 211.740965][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.748836][T26800] EXT4-fs (loop0): 1 truncate cleaned up [ 211.756134][T26800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.771882][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4062'. [ 211.780386][T26807] openvswitch: netlink: IPv4 tun info is not correct [ 211.804237][T26809] smc: net device bond0 applied user defined pnetid SYZ0 [ 211.815431][T26811] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4064'. [ 211.910964][T26826] loop4: detected capacity change from 0 to 512 [ 211.931650][T26826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4071: bg 0: block 248: padding at end of block bitmap is not set [ 211.946819][T26826] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.4071: Failed to acquire dquot type 1 [ 211.960710][T26826] EXT4-fs (loop4): 1 truncate cleaned up [ 211.966688][T26826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.980748][T26826] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.012369][T24235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.023749][T26829] loop2: detected capacity change from 0 to 8192 [ 212.067041][T26829] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.111486][T26845] syz.4.4077[26845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.111556][T26845] syz.4.4077[26845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.132822][T26845] syz.4.4077[26845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.295933][T26866] loop2: detected capacity change from 0 to 512 [ 212.337184][T26866] EXT4-fs: Ignoring removed i_version option [ 212.349676][T26866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.363616][T26866] EXT4-fs (loop2): 1 truncate cleaned up [ 212.369807][T26866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.599261][T25828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.649558][T26877] sctp: [Deprecated]: syz.0.4084 (pid 26877) Use of int in max_burst socket option. [ 212.649558][T26877] Use struct sctp_assoc_value instead [ 212.697769][T26864] loop4: detected capacity change from 0 to 8192 [ 212.708840][T26882] loop0: detected capacity change from 0 to 512 [ 212.732804][T26882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.752993][T26864] loop4: p2 p3 p4 [ 212.756836][T26864] loop4: p2 start 14935 is beyond EOD, truncated [ 212.757107][T26882] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.775313][T26864] loop4: p4 start 4026530307 is beyond EOD, truncated [ 212.791611][T25828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.173977][T26910] netlink: 'syz.0.4092': attribute type 21 has an invalid length. [ 213.221160][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.242934][T26919] syz.2.4095[26919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.516271][T26902] loop4: detected capacity change from 0 to 8192 [ 213.577760][T26950] loop0: detected capacity change from 0 to 512 [ 213.584516][T26950] EXT4-fs: Ignoring removed i_version option [ 213.584968][T26902] loop4: p2 p3 p4 [ 213.590909][T26950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.594783][T26902] loop4: p2 start 14935 is beyond EOD, truncated [ 213.611418][T26902] loop4: p4 start 4026530307 is beyond EOD, truncated [ 213.616193][T26950] EXT4-fs (loop0): 1 truncate cleaned up [ 213.635205][T26950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.725088][T26923] loop2: detected capacity change from 0 to 8192 [ 213.769815][T26970] 9pnet_fd: p9_fd_create_tcp (26970): problem connecting socket to 127.0.0.1 [ 213.779846][T26923] loop2: p2 p3 p4 [ 213.783627][T26923] loop2: p2 start 14935 is beyond EOD, truncated [ 213.791154][T26923] loop2: p4 start 4026530307 is beyond EOD, truncated [ 213.805481][T26968] hub 2-0:1.0: USB hub found [ 213.810327][T26968] hub 2-0:1.0: 8 ports detected [ 213.815462][T26975] xt_hashlimit: size too large, truncated to 1048576 [ 213.850306][T26979] loop4: detected capacity change from 0 to 1024 [ 213.869462][T26979] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 213.989722][T26994] loop4: detected capacity change from 0 to 128 [ 214.019119][T26994] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.031631][T26994] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.087400][T24235] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.196672][T27004] netlink: 'syz.4.4116': attribute type 29 has an invalid length. [ 214.219456][T27004] netlink: 'syz.4.4116': attribute type 29 has an invalid length. [ 214.248614][T27004] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4116'. [ 214.257746][T27004] unsupported nla_type 40 [ 214.273867][T27008] loop1: detected capacity change from 0 to 128 [ 214.346064][T27025] rdma_op ffff888102272d80 conn xmit_rdma 0000000000000000 [ 214.427567][T27035] loop4: detected capacity change from 0 to 512 [ 214.441535][T27035] EXT4-fs: Ignoring removed i_version option [ 214.448496][T27035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.463341][T27035] EXT4-fs (loop4): 1 truncate cleaned up [ 214.469397][T27035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.545897][T27042] loop1: detected capacity change from 0 to 512 [ 214.552457][T27042] EXT4-fs: Ignoring removed i_version option [ 214.560246][T27042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.571911][T25828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.583109][T27042] EXT4-fs (loop1): 1 truncate cleaned up [ 214.589423][T27042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.666100][T27053] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4130'. [ 215.361953][T24235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.479359][T26231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.509253][T27076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4136'. [ 215.579195][T27090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 215.602785][T27096] loop0: detected capacity change from 0 to 128 [ 215.609826][T27096] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 215.614992][T27098] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 215.625907][T27098] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 215.648771][T27096] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.674339][T27096] ext2 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.739195][T25828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.779718][T27109] atomic_op ffff8881159a2128 conn xmit_atomic 0000000000000000 [ 215.802651][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 215.802665][ T29] audit: type=1400 audit(1727705244.393:9875): avc: denied { create } for pid=27111 comm="syz.4.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.830878][ T29] audit: type=1400 audit(1727705244.393:9876): avc: denied { connect } for pid=27111 comm="syz.4.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.860460][ T29] audit: type=1326 audit(1727705244.449:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 215.884154][ T29] audit: type=1326 audit(1727705244.449:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 215.907726][ T29] audit: type=1326 audit(1727705244.449:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 215.931324][ T29] audit: type=1326 audit(1727705244.449:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 215.937017][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'. [ 215.955083][ T29] audit: type=1326 audit(1727705244.449:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 215.963756][T27119] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4154'. [ 215.996349][ T29] audit: type=1326 audit(1727705244.449:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 216.020076][ T29] audit: type=1326 audit(1727705244.449:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 216.043910][ T29] audit: type=1326 audit(1727705244.449:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27104 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 216.224931][T27101] loop1: detected capacity change from 0 to 8192 [ 216.260776][T27101] loop1: p2 p3 p4 [ 216.264559][T27101] loop1: p2 start 14935 is beyond EOD, truncated [ 216.273691][T27101] loop1: p4 start 4026530307 is beyond EOD, truncated [ 216.294624][T27156] tipc: Enabling of bearer rejected, already enabled [ 216.392779][T27145] chnl_net:caif_netlink_parms(): no params data found [ 216.474924][T27321] loop1: detected capacity change from 0 to 512 [ 216.485292][T27145] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.492502][T27145] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.502801][T27145] bridge_slave_0: entered allmulticast mode [ 216.509510][T27321] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.4170: casefold flag without casefold feature [ 216.522905][T27145] bridge_slave_0: entered promiscuous mode [ 216.524539][T27321] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.4170: couldn't read orphan inode 15 (err -117) [ 216.530034][T27145] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.548404][T27145] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.555764][T27145] bridge_slave_1: entered allmulticast mode [ 216.562240][T27145] bridge_slave_1: entered promiscuous mode [ 216.569717][T27321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.593119][T27145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.604152][T27145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.604426][T26231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.632160][T27145] team0: Port device team_slave_0 added [ 216.638609][T27145] team0: Port device team_slave_1 added [ 216.665938][T27145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.673003][T27145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.681947][T27406] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 216.699002][T27145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.718938][T27145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.725902][T27145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.752026][T27145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.758504][T27410] netlink: 664 bytes leftover after parsing attributes in process `syz.4.4176'. [ 216.796747][T27145] hsr_slave_0: entered promiscuous mode [ 216.807211][T27145] hsr_slave_1: entered promiscuous mode [ 216.816897][T27145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.824946][T27145] Cannot create hsr debugfs directory [ 216.924269][T27145] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.966805][T27145] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.033980][T27145] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.074845][T27145] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.091546][T27541] bpf_get_probe_write_proto: 8 callbacks suppressed [ 217.091559][T27541] syz.1.4193[27541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.098399][T27541] syz.1.4193[27541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.109964][T27541] syz.1.4193[27541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.144733][T27145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.159642][T27558] loop1: detected capacity change from 0 to 128 [ 217.169735][T27558] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 217.171227][T27145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.184679][T27558] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.196972][T27558] ext2 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.198817][T27145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.240443][T27145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.251716][T26231] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.256815][T27145] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.267924][T27145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.275246][T27145] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.282289][T27145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.314599][T27145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.326454][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.335414][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.348871][T27145] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.362294][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.369510][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.380484][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.387605][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.471417][T27145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.557656][T27145] veth0_vlan: entered promiscuous mode [ 217.566555][T27145] veth1_vlan: entered promiscuous mode [ 217.584838][T27145] veth0_macvtap: entered promiscuous mode [ 217.592188][T27145] veth1_macvtap: entered promiscuous mode [ 217.603264][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.613779][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.623723][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.634252][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.644079][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.654606][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.664546][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.675001][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.684958][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.695403][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.705313][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.715729][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.725545][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.735982][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.746925][T27145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.757780][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.768278][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.778123][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.788600][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.798452][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.808883][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.818742][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.829216][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.839167][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.849645][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.859597][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.870174][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.880007][T27145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.890516][T27145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.903239][T27145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.919547][T27145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.928314][T27145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.937088][T27145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.945942][T27145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.031183][T27566] loop1: detected capacity change from 0 to 8192 [ 218.108686][T27612] syz.4.4209: attempt to access beyond end of device [ 218.108686][T27612] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 218.114000][T27566] loop1: p2 p3 p4 [ 218.129869][T27566] loop1: p2 start 14935 is beyond EOD, truncated [ 218.137287][T27566] loop1: p4 start 4026530307 is beyond EOD, truncated [ 218.151369][T27619] loop4: detected capacity change from 0 to 256 [ 218.170892][T27619] FAT-fs (loop4): Directory bread(block 64) failed [ 218.182414][T27619] FAT-fs (loop4): Directory bread(block 65) failed [ 218.189550][T27619] FAT-fs (loop4): Directory bread(block 66) failed [ 218.196365][T27619] FAT-fs (loop4): Directory bread(block 67) failed [ 218.203483][T27619] FAT-fs (loop4): Directory bread(block 68) failed [ 218.210255][T27619] FAT-fs (loop4): Directory bread(block 69) failed [ 218.217442][T27619] FAT-fs (loop4): Directory bread(block 70) failed [ 218.236264][T27619] FAT-fs (loop4): Directory bread(block 71) failed [ 218.244816][T27625] loop2: detected capacity change from 0 to 256 [ 218.251276][T27619] FAT-fs (loop4): Directory bread(block 72) failed [ 218.258737][T27619] FAT-fs (loop4): Directory bread(block 73) failed [ 218.322785][T27637] loop2: detected capacity change from 0 to 128 [ 218.400056][T27649] loop1: detected capacity change from 0 to 128 [ 218.419879][T27649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.432536][T27649] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.465469][T26231] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.466362][T27659] loop4: detected capacity change from 0 to 8192 [ 218.507988][T27666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 218.566232][T27678] loop2: detected capacity change from 0 to 512 [ 218.572999][T27678] EXT4-fs: Ignoring removed i_version option [ 218.575046][T27684] loop4: detected capacity change from 0 to 512 [ 218.580696][T27678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.585848][T27684] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.602680][T27684] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 218.611593][T27678] EXT4-fs (loop2): 1 truncate cleaned up [ 218.620944][T27678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.637247][T27684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 218.647785][T27684] System zones: 1-12 [ 218.654880][T27684] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4232: corrupted in-inode xattr: e_value size too large [ 218.669465][T27684] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.4232: couldn't read orphan inode 15 (err -117) [ 218.682486][T27684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.730608][T24235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.803704][T27700] netlink: 'syz.4.4238': attribute type 3 has an invalid length. [ 218.811595][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 218.822279][T27702] loop1: detected capacity change from 0 to 256 [ 218.850406][T27705] loop4: detected capacity change from 0 to 512 [ 218.857473][T27705] EXT4-fs: Ignoring removed i_version option [ 218.864462][T27705] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.880738][T27705] EXT4-fs (loop4): 1 truncate cleaned up [ 218.888860][T27705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.950193][T27715] loop1: detected capacity change from 0 to 2048 [ 219.006056][T27715] Alternate GPT is invalid, using primary GPT. [ 219.012588][T27715] loop1: p1 p2 p3 [ 219.355270][T27761] syz.3.4253[27761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.355350][T27761] syz.3.4253[27761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.380124][T27761] syz.3.4253[27761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.574401][T17871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.644510][T27798] loop2: detected capacity change from 0 to 512 [ 219.673597][T27798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.718797][T27805] loop0: detected capacity change from 0 to 164 [ 219.749124][T27805] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 219.815424][T27798] EXT4-fs (loop2): 1 truncate cleaned up [ 219.821600][T27798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.956081][T27819] loop0: detected capacity change from 0 to 128 [ 220.035821][T27837] loop0: detected capacity change from 0 to 512 [ 220.045053][T27837] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.4272: casefold flag without casefold feature [ 220.058817][T27837] EXT4-fs (loop0): get root inode failed [ 220.064548][T27837] EXT4-fs (loop0): mount failed [ 220.168389][T27846] loop2: detected capacity change from 0 to 1024 [ 220.177701][T27849] syz.1.4276[27849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.177792][T27849] syz.1.4276[27849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.189670][T27846] EXT4-fs: Ignoring removed orlov option [ 220.208731][T27849] syz.1.4276[27849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.276866][T27865] loop0: detected capacity change from 0 to 128 [ 220.314902][T27869] loop4: detected capacity change from 0 to 1024 [ 220.321660][T27869] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 220.331321][T27869] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 220.433590][T27897] loop4: detected capacity change from 0 to 512 [ 220.497687][T27897] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.515531][T27897] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.4291: corrupted inode contents [ 220.539174][T27897] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.4291: mark_inode_dirty error [ 220.555217][T27897] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.4291: corrupted inode contents [ 220.575964][T27897] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.4291: mark_inode_dirty error [ 220.594324][T27897] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #18: comm syz.4.4291: directory missing '.' [ 220.619469][T27906] block device autoloading is deprecated and will be removed. [ 220.624595][T27921] loop4: detected capacity change from 0 to 128 [ 220.627403][T27906] syz.2.4292: attempt to access beyond end of device [ 220.627403][T27906] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 220.635338][T27921] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.711304][T27931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4294'. [ 220.877632][T27877] loop0: detected capacity change from 0 to 8192 [ 220.900657][T27965] syz.4.4298[27965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.930339][T27877] loop0: p2 p3 p4 [ 220.947279][T27877] loop0: p2 start 14935 is beyond EOD, truncated [ 220.956506][T27877] loop0: p4 start 4026530307 is beyond EOD, truncated [ 220.998164][T27983] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 221.062590][T27987] loop4: detected capacity change from 0 to 2048 [ 221.261239][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 221.261255][ T29] audit: type=1400 audit(1727705249.433:10148): avc: denied { ioctl } for pid=28014 comm="syz.4.4310" path="socket:[46446]" dev="sockfs" ino=46446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.283228][T28018] loop1: detected capacity change from 0 to 512 [ 221.294434][ T29] audit: type=1400 audit(1727705249.433:10149): avc: denied { bind } for pid=28014 comm="syz.4.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.318115][ T29] audit: type=1400 audit(1727705249.433:10150): avc: denied { connect } for pid=28014 comm="syz.4.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.337955][ T29] audit: type=1400 audit(1727705249.433:10151): avc: denied { write } for pid=28014 comm="syz.4.4310" path="socket:[46446]" dev="sockfs" ino=46446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.376594][T28018] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.4311: iget: bogus i_mode (0) [ 221.390446][T28018] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.4311: couldn't read orphan inode 17 (err -117) [ 221.407525][ T29] audit: type=1400 audit(1727705249.571:10152): avc: denied { setattr } for pid=28016 comm="syz.1.4311" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.463713][T27956] loop2: detected capacity change from 0 to 8192 [ 221.471372][T28018] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4311: bg 0: block 7: invalid block bitmap [ 221.494824][T27956] loop2: p2 p3 p4 [ 221.498712][T27956] loop2: p2 start 14935 is beyond EOD, truncated [ 221.508548][T27956] loop2: p4 start 4026530307 is beyond EOD, truncated [ 221.598890][T28033] loop1: detected capacity change from 0 to 512 [ 221.618046][T28033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.642176][T28033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 221.670848][T28033] EXT4-fs (loop1): 1 truncate cleaned up [ 221.684108][T28033] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.4324: path /65/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 221.732836][ T29] audit: type=1400 audit(1727705249.876:10153): avc: denied { create } for pid=28044 comm="syz.1.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.762210][ T29] audit: type=1400 audit(1727705249.894:10154): avc: denied { connect } for pid=28044 comm="syz.1.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.778078][T28050] loop1: detected capacity change from 0 to 256 [ 221.783901][T28048] loop2: detected capacity change from 0 to 128 [ 221.796576][T28048] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.944369][T28088] @: renamed from bond0 (while UP) [ 221.944403][ T29] audit: type=1400 audit(1727705250.060:10155): avc: denied { ioctl } for pid=28087 comm="syz.1.4321" path="socket:[45718]" dev="sockfs" ino=45718 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.987519][T28025] loop3: detected capacity change from 0 to 8192 [ 222.033722][T28096] bond0: entered promiscuous mode [ 222.038962][T28096] bond0: entered allmulticast mode [ 222.040183][T28025] loop3: p2 p3 p4 [ 222.050712][T28096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.058455][T28025] loop3: p2 start 14935 is beyond EOD, truncated [ 222.083856][T28096] bond0 (unregistering): Released all slaves [ 222.094380][T28025] loop3: p4 start 4026530307 is beyond EOD, truncated [ 222.115019][ T29] audit: type=1326 audit(1727705250.208:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.0.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 222.138858][ T29] audit: type=1326 audit(1727705250.208:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28134 comm="syz.0.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7332dff9 code=0x7ffc0000 [ 222.323917][T28190] futex_wake_op: syz.3.4330 tries to shift op by 35; fix this program [ 222.349819][T28198] loop0: detected capacity change from 0 to 164 [ 222.369582][T28198] Unable to read rock-ridge attributes [ 222.404060][T28198] Unable to read rock-ridge attributes [ 222.410553][T28198] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 222.494536][T28219] loop0: detected capacity change from 0 to 512 [ 222.524890][T28219] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.538012][T28219] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.4341: corrupted inode contents [ 222.550653][T28219] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.4341: mark_inode_dirty error [ 222.562186][T28219] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.4341: corrupted inode contents [ 222.574307][T28219] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.4341: mark_inode_dirty error [ 222.589341][T28219] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #18: comm syz.0.4341: directory missing '.' [ 222.621174][T28231] netlink: 272 bytes leftover after parsing attributes in process `+}[@'. [ 222.625048][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 222.637263][ T35] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 222.649050][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.657152][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.664684][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.672092][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.679538][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.687005][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.694461][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.702199][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.709842][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.717301][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.724712][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.732135][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.739617][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.747013][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.754417][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.757518][T28170] loop2: detected capacity change from 0 to 8192 [ 222.761886][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.776104][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.783764][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.791166][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.798625][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.806021][ T35] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.817692][ T35] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 222.837403][T28170] loop2: p2 p3 p4 [ 222.841315][T28170] loop2: p2 start 14935 is beyond EOD, truncated [ 222.862366][T28170] loop2: p4 start 4026530307 is beyond EOD, truncated [ 223.005834][T28273] smc: net device bond0 erased user defined pnetid SYZ0 [ 223.042984][T28276] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.4356'. [ 223.052428][T28276] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.4356'. [ 223.143040][T28289] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4361'. [ 223.213133][T28297] loop2: detected capacity change from 0 to 512 [ 223.220025][T28297] EXT4-fs: Ignoring removed i_version option [ 223.226535][T28297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.247810][T28297] EXT4-fs (loop2): 1 truncate cleaned up [ 223.464831][T28318] random: crng reseeded on system resumption [ 223.628960][T28323] loop4: detected capacity change from 0 to 8192 [ 223.637235][T28323] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.721162][T28295] loop0: detected capacity change from 0 to 8192 [ 223.781196][T28295] loop0: p2 p3 p4 [ 223.784990][T28295] loop0: p2 start 14935 is beyond EOD, truncated [ 223.801726][T28295] loop0: p4 start 4026530307 is beyond EOD, truncated [ 223.979304][T28352] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 224.025867][T28354] netlink: 'syz.0.4382': attribute type 3 has an invalid length. [ 224.033763][T28354] netlink: 'syz.0.4382': attribute type 3 has an invalid length. [ 224.137146][T28361] loop0: detected capacity change from 0 to 4096 [ 224.143802][T28361] EXT4-fs: Ignoring removed nobh option [ 224.149540][T28361] EXT4-fs: Ignoring removed i_version option [ 224.194078][T28370] smc: net device bond0 applied user defined pnetid SYZ0 [ 224.206107][T28370] smc: net device bond0 erased user defined pnetid SYZ0 [ 224.241185][T28379] loop0: detected capacity change from 0 to 512 [ 224.248286][T28379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.259312][T28379] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 224.275662][T28379] EXT4-fs (loop0): 1 truncate cleaned up [ 224.285945][T28379] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.0.4390: path /90/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 224.336268][T28384] bond1: entered promiscuous mode [ 224.341455][T28384] bond1: entered allmulticast mode [ 224.346730][T28384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.357999][T28384] bond1 (unregistering): Released all slaves [ 224.443872][T28452] loop0: detected capacity change from 0 to 2048 [ 224.450607][T28452] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.622393][T28458] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4392: bg 0: block 234: padding at end of block bitmap is not set [ 224.636900][T28458] EXT4-fs (loop0): Remounting filesystem read-only [ 224.717130][T28377] loop2: detected capacity change from 0 to 8192 [ 224.769690][T28465] loop0: detected capacity change from 0 to 1024 [ 224.776304][T28377] loop2: p2 p3 p4 [ 224.780061][T28377] loop2: p2 start 14935 is beyond EOD, truncated [ 224.786865][T28377] loop2: p4 start 4026530307 is beyond EOD, truncated [ 224.821286][ T2142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 224.838033][ T2142] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 224.850337][ T2142] EXT4-fs (loop0): This should not happen!! Data will be lost [ 224.850337][ T2142] [ 224.860410][ T2142] EXT4-fs (loop0): Total free blocks count 0 [ 224.866717][ T2142] EXT4-fs (loop0): Free/Dirty block details [ 224.872692][ T2142] EXT4-fs (loop0): free_blocks=68451041280 [ 224.878537][ T2142] EXT4-fs (loop0): dirty_blocks=64 [ 224.883658][ T2142] EXT4-fs (loop0): Block reservation details [ 224.889668][ T2142] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 224.898330][T28471] loop2: detected capacity change from 0 to 1024 [ 224.930641][T28485] loop2: detected capacity change from 0 to 512 [ 224.937238][T28485] EXT4-fs: Ignoring removed i_version option [ 224.944282][T28485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.955493][T28485] EXT4-fs (loop2): 1 truncate cleaned up [ 225.293589][T28502] ================================================================== [ 225.301711][T28502] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 225.311124][T28502] [ 225.313455][T28502] read-write to 0xffff88810645f7b8 of 4 bytes by task 28485 on cpu 0: [ 225.321621][T28502] __writeback_single_inode+0x1f4/0x850 [ 225.327200][T28502] writeback_single_inode+0x16c/0x3f0 [ 225.332614][T28502] sync_inode_metadata+0x5c/0x90 [ 225.337579][T28502] generic_buffers_fsync_noflush+0xd8/0x120 [ 225.343499][T28502] ext4_sync_file+0x1ff/0x6c0 [ 225.348204][T28502] vfs_fsync_range+0x116/0x130 [ 225.353003][T28502] ext4_buffered_write_iter+0x326/0x370 [ 225.358572][T28502] ext4_file_write_iter+0x293/0xe10 [ 225.364145][T28502] iter_file_splice_write+0x5f1/0x980 [ 225.369559][T28502] direct_splice_actor+0x160/0x2c0 [ 225.374699][T28502] splice_direct_to_actor+0x302/0x670 [ 225.380102][T28502] do_splice_direct+0xd7/0x150 [ 225.384896][T28502] do_sendfile+0x39b/0x970 [ 225.389345][T28502] __x64_sys_sendfile64+0x110/0x150 [ 225.394574][T28502] x64_sys_call+0xed5/0x2d60 [ 225.399204][T28502] do_syscall_64+0xc9/0x1c0 [ 225.403723][T28502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.409655][T28502] [ 225.411991][T28502] read to 0xffff88810645f7b8 of 4 bytes by task 28502 on cpu 1: [ 225.419640][T28502] generic_buffers_fsync_noflush+0x83/0x120 [ 225.425565][T28502] ext4_sync_file+0x1ff/0x6c0 [ 225.430275][T28502] vfs_fsync_range+0x116/0x130 [ 225.435065][T28502] ext4_buffered_write_iter+0x326/0x370 [ 225.440654][T28502] ext4_file_write_iter+0x293/0xe10 [ 225.445892][T28502] iter_file_splice_write+0x5f1/0x980 [ 225.451288][T28502] direct_splice_actor+0x160/0x2c0 [ 225.456426][T28502] splice_direct_to_actor+0x302/0x670 [ 225.461823][T28502] do_splice_direct+0xd7/0x150 [ 225.466604][T28502] do_sendfile+0x39b/0x970 [ 225.471044][T28502] __x64_sys_sendfile64+0x110/0x150 [ 225.476268][T28502] x64_sys_call+0xed5/0x2d60 [ 225.480889][T28502] do_syscall_64+0xc9/0x1c0 [ 225.485412][T28502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.491338][T28502] [ 225.493670][T28502] value changed: 0x00000022 -> 0x00000000 [ 225.499402][T28502] [ 225.501737][T28502] Reported by Kernel Concurrency Sanitizer on: [ 225.507916][T28502] CPU: 1 UID: 0 PID: 28502 Comm: syz.2.4396 Tainted: G W 6.12.0-rc1-syzkaller #0 [ 225.518432][T28502] Tainted: [W]=WARN [ 225.522239][T28502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.532314][T28502] ==================================================================