last executing test programs: 8.28059996s ago: executing program 0 (id=610): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x600, 0x0, 0x1d}) 8.209091437s ago: executing program 0 (id=611): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=0x4, 0x71c37bf027493c63) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r3, 0x100000000000006, 0x7fffffffffffdf7, &(0x7f0000000140), 0x0) io_submit(r3, 0x1, &(0x7f00000058c0)=[&(0x7f0000005880)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_destroy(r3) 7.887627446s ago: executing program 0 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 7.74010288s ago: executing program 0 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 7.601000933s ago: executing program 0 (id=621): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b4}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@noinit_itable}]}, 0x1, 0x556, &(0x7f0000001100)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 7.479538704s ago: executing program 0 (id=623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r1, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.833659162s ago: executing program 1 (id=703): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 1.686023426s ago: executing program 1 (id=707): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.578946885s ago: executing program 1 (id=709): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.558297347s ago: executing program 3 (id=710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa0100fe}}], 0x1c) shutdown(r1, 0xb2b6d39ce7fe7c6d) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 975.122751ms ago: executing program 2 (id=715): mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ed17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='net/rt_cache\x00', 0xfffffffffffffffd) 833.488824ms ago: executing program 2 (id=716): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) dup3(r0, r1, 0x0) capset(0x0, &(0x7f0000000280)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x11, "0900e9ffffff00"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 828.232165ms ago: executing program 4 (id=717): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) tkill(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 814.772976ms ago: executing program 2 (id=718): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = io_uring_setup(0x758a, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write(r4, &(0x7f0000000200)="99", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x11, r4, 0x0) socket$inet6(0xa, 0x2, 0x0) 731.181024ms ago: executing program 1 (id=719): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) lseek(r0, 0x200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0xf800) 664.352599ms ago: executing program 2 (id=720): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 663.63751ms ago: executing program 2 (id=721): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000003f80)={{}, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 663.4267ms ago: executing program 3 (id=730): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) link(0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) 634.248222ms ago: executing program 4 (id=722): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000300070000000000000000000000000000001400010000000000000000000005"], 0x44}}, 0x0) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 591.516087ms ago: executing program 2 (id=723): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 590.796456ms ago: executing program 1 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 545.60331ms ago: executing program 4 (id=725): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 519.595443ms ago: executing program 1 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8001, 0x0) 466.078568ms ago: executing program 4 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000004c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb9b}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0xd2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) writev(r2, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) 344.412539ms ago: executing program 4 (id=728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x5000, 0x1}, 0x18) bind$bt_hci(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 343.801129ms ago: executing program 4 (id=729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffdfd, 0x2000000}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 89.264732ms ago: executing program 3 (id=731): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x1ff) sendto$inet(r3, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 69.565404ms ago: executing program 3 (id=732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r6, @ANYBLOB="92"], 0x20}}, 0x0) 594.971µs ago: executing program 3 (id=733): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x95, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 0s ago: executing program 3 (id=734): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000200000000000000000000000018110015", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 83102][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.544588][ T4703] syzkaller0: entered promiscuous mode [ 65.550220][ T4703] syzkaller0: entered allmulticast mode [ 65.575446][ T4594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.593245][ T4609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.603771][ T4609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.752205][ T4609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.811410][ T4730] Unsupported ieee802154 address type: 0 [ 65.819950][ T4594] veth0_vlan: entered promiscuous mode [ 65.844935][ T4594] veth1_vlan: entered promiscuous mode [ 65.875989][ T4594] veth0_macvtap: entered promiscuous mode [ 65.897156][ T4594] veth1_macvtap: entered promiscuous mode [ 65.941500][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.952138][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.961986][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.972446][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.982284][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.992770][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.010381][ T4734] loop2: detected capacity change from 0 to 512 [ 66.064315][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.083595][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.094135][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.104065][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.114599][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.124429][ T4594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.134951][ T4594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.160806][ T4734] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.168988][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.211179][ T4594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220234][ T4594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.229034][ T4594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.237939][ T4594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.316746][ T4748] loop2: detected capacity change from 0 to 512 [ 66.328459][ T4609] veth0_vlan: entered promiscuous mode [ 66.343246][ T4609] veth1_vlan: entered promiscuous mode [ 66.361380][ T4748] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.353: casefold flag without casefold feature [ 66.386354][ T4748] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.353: couldn't read orphan inode 15 (err -117) [ 66.395406][ T4758] loop1: detected capacity change from 0 to 256 [ 66.400997][ T4609] veth0_macvtap: entered promiscuous mode [ 66.412433][ T4609] veth1_macvtap: entered promiscuous mode [ 66.423902][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.434422][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.444368][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.454895][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.454917][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.454939][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.454957][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.454973][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.456589][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.519532][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.530182][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.540437][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.551064][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.561064][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.571531][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.581394][ T4609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.592121][ T4609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.603408][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.611974][ T4609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620783][ T4609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629691][ T4609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.638477][ T4609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.742948][ T4771] team_slave_0: entered promiscuous mode [ 66.748652][ T4771] team_slave_1: entered promiscuous mode [ 66.765587][ T4771] macvtap1: entered promiscuous mode [ 66.768142][ T1052] kernel read not supported for file inotify (pid: 1052 comm: kworker/0:2) [ 66.771115][ T4771] team0: entered promiscuous mode [ 66.785593][ T4771] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 66.795397][ T4771] team0: Device macvtap1 is already an upper device of the team interface [ 66.806160][ T4771] team0: left promiscuous mode [ 66.811429][ T4771] team_slave_0: left promiscuous mode [ 66.816828][ T4771] team_slave_1: left promiscuous mode [ 66.855814][ T4691] coredump: 1(syz.2.343): written to core: VMAs: 29, size 91123712; core: 62227118 bytes, pos 91131904 [ 66.915886][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 66.939836][ T4781] loop2: detected capacity change from 0 to 256 [ 66.987277][ T4781] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.991735][ T4788] loop1: detected capacity change from 0 to 1024 [ 66.997454][ T4781] FAT-fs (loop2): Filesystem has been set read-only [ 67.013238][ T4789] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 67.013367][ T4788] EXT4-fs: Ignoring removed orlov option [ 67.023013][ T4781] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 67.027279][ T4788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.063460][ T4783] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 67.133602][ T3583] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 67.134714][ T4795] loop1: detected capacity change from 0 to 2048 [ 67.164226][ T3583] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 67.187530][ T4795] loop1: p1 < > p4 [ 67.196989][ T4795] loop1: p4 size 8388608 extends beyond EOD, truncated [ 67.216218][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 67.216233][ T29] audit: type=1400 audit(1727352737.892:1641): avc: denied { read write } for pid=4794 comm="syz.1.366" name="loop1p4" dev="devtmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.259685][ T29] audit: type=1400 audit(1727352737.932:1642): avc: denied { open } for pid=4794 comm="syz.1.366" path="/dev/loop1p4" dev="devtmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.282913][ T29] audit: type=1400 audit(1727352737.932:1643): avc: denied { ioctl } for pid=4794 comm="syz.1.366" path="/dev/loop1p4" dev="devtmpfs" ino=503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.395339][ T4804] loop3: detected capacity change from 0 to 512 [ 67.418438][ T4804] EXT4-fs: Ignoring removed bh option [ 67.448053][ T4804] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.475591][ T4804] EXT4-fs (loop3): 1 truncate cleaned up [ 67.496559][ T4804] EXT4-fs mount: 14 callbacks suppressed [ 67.496581][ T4804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.532157][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.551932][ T29] audit: type=1326 audit(1727352738.232:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35b15df39 code=0x7ffc0000 [ 67.575372][ T29] audit: type=1326 audit(1727352738.232:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35b15df39 code=0x7ffc0000 [ 67.610628][ T4808] loop1: detected capacity change from 0 to 512 [ 67.660760][ T4808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.374: bg 0: block 131: padding at end of block bitmap is not set [ 67.682171][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.697254][ T4808] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.717271][ T4808] EXT4-fs (loop1): 1 truncate cleaned up [ 67.723014][ T29] audit: type=1326 audit(1727352738.292:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa35b15df39 code=0x7ffc0000 [ 67.746510][ T29] audit: type=1326 audit(1727352738.292:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa35b15df73 code=0x7ffc0000 [ 67.769896][ T29] audit: type=1326 audit(1727352738.292:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa35b15ca1f code=0x7ffc0000 [ 67.793162][ T29] audit: type=1326 audit(1727352738.292:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa35b15dfc7 code=0x7ffc0000 [ 67.816490][ T29] audit: type=1326 audit(1727352738.292:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35b15c8d0 code=0x7ffc0000 [ 67.849970][ T4808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.876738][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.906708][ T4464] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.936506][ T4821] team_slave_0: entered promiscuous mode [ 67.942232][ T4821] team_slave_1: entered promiscuous mode [ 67.967082][ T4821] macvtap1: entered promiscuous mode [ 67.972469][ T4821] team0: entered promiscuous mode [ 67.987677][ T4821] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 67.996039][ T4821] team0: Device macvtap1 is already an upper device of the team interface [ 68.029330][ T4821] team0: left promiscuous mode [ 68.034365][ T4821] team_slave_0: left promiscuous mode [ 68.039893][ T4821] team_slave_1: left promiscuous mode [ 68.071929][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.098855][ T4824] loop4: detected capacity change from 0 to 512 [ 68.132619][ T4824] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.143441][ T4824] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.158453][ T4824] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.377: Failed to acquire dquot type 1 [ 68.180674][ T4824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.377: bg 0: block 40: padding at end of block bitmap is not set [ 68.210517][ T4824] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.241309][ T4811] chnl_net:caif_netlink_parms(): no params data found [ 68.260871][ T36] bridge_slave_1: left allmulticast mode [ 68.266567][ T36] bridge_slave_1: left promiscuous mode [ 68.272267][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.286972][ T4824] EXT4-fs (loop4): 1 truncate cleaned up [ 68.304704][ T36] bridge_slave_0: left allmulticast mode [ 68.310605][ T36] bridge_slave_0: left promiscuous mode [ 68.316605][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.326232][ T4833] loop1: detected capacity change from 0 to 256 [ 68.333160][ T4824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.369513][ T4833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 68.379881][ T4833] FAT-fs (loop1): Filesystem has been set read-only [ 68.391859][ T4833] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 68.420038][ T4464] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 68.437103][ T4464] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 68.482205][ T3938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.499113][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.509569][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.520267][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 68.530188][ T36] bond0 (unregistering): Released all slaves [ 68.598109][ T36] hsr_slave_0: left promiscuous mode [ 68.603709][ T36] hsr_slave_1: left promiscuous mode [ 68.610841][ T36] veth1_macvtap: left promiscuous mode [ 68.616365][ T36] veth0_macvtap: left promiscuous mode [ 68.622008][ T36] veth1_vlan: left promiscuous mode [ 68.627360][ T36] veth0_vlan: left promiscuous mode [ 68.662467][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.672374][ T4842] loop3: detected capacity change from 0 to 128 [ 68.685919][ T4842] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.699566][ T4842] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.825502][ T36] team0 (unregistering): Port device team_slave_1 removed [ 68.839210][ T36] team0 (unregistering): Port device team_slave_0 removed [ 68.896632][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.903929][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.911498][ T4811] bridge_slave_0: entered allmulticast mode [ 68.918129][ T4811] bridge_slave_0: entered promiscuous mode [ 68.925973][ T4842] €: renamed from bond0 (while UP) [ 68.933672][ T4846] bridge0: port 3(syz_tun) entered blocking state [ 68.940247][ T4846] bridge0: port 3(syz_tun) entered disabled state [ 68.947127][ T4846] syz_tun: entered allmulticast mode [ 68.962067][ T3938] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.972516][ T4846] syz_tun: entered promiscuous mode [ 68.985155][ T4846] bridge0: port 3(syz_tun) entered blocking state [ 68.991638][ T4846] bridge0: port 3(syz_tun) entered forwarding state [ 68.998970][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.006096][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.015050][ T4811] bridge_slave_1: entered allmulticast mode [ 69.024959][ T4811] bridge_slave_1: entered promiscuous mode [ 69.042463][ T4856] team_slave_0: entered promiscuous mode [ 69.048256][ T4856] team_slave_1: entered promiscuous mode [ 69.054313][ T4856] macvtap0: entered promiscuous mode [ 69.059708][ T4856] team0: entered promiscuous mode [ 69.068229][ T4856] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 69.077735][ T4856] team0: Device macvtap0 is already an upper device of the team interface [ 69.087097][ T4856] team0: left promiscuous mode [ 69.092339][ T4856] team_slave_0: left promiscuous mode [ 69.097839][ T4856] team_slave_1: left promiscuous mode [ 69.124583][ T4811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.138083][ T4811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.163826][ T4811] team0: Port device team_slave_0 added [ 69.177588][ T4811] team0: Port device team_slave_1 added [ 69.212395][ T4811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.219915][ T4811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.241451][ T4865] loop3: detected capacity change from 0 to 256 [ 69.245946][ T4811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.265106][ T4811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.272168][ T4811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.298606][ T4811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.341130][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 69.354221][ T4865] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.364435][ T4865] FAT-fs (loop3): Filesystem has been set read-only [ 69.372136][ T4865] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.374702][ T4811] hsr_slave_0: entered promiscuous mode [ 69.389724][ T4811] hsr_slave_1: entered promiscuous mode [ 69.395628][ T4811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.400680][ T3938] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 69.406940][ T4811] Cannot create hsr debugfs directory [ 69.412622][ T3938] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 69.495095][ T4848] chnl_net:caif_netlink_parms(): no params data found [ 69.512141][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.602205][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.614976][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.622347][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.629702][ T4848] bridge_slave_0: entered allmulticast mode [ 69.636492][ T4848] bridge_slave_0: entered promiscuous mode [ 70.085674][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.092932][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.100169][ T4848] bridge_slave_1: entered allmulticast mode [ 70.106784][ T4848] bridge_slave_1: entered promiscuous mode [ 70.127128][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.138369][ T4891] netlink: 'syz.4.397': attribute type 8 has an invalid length. [ 70.146645][ T4891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.171457][ T4848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.184306][ T4848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.201030][ T4895] loop4: detected capacity change from 0 to 2048 [ 70.217240][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.230271][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.238535][ T4848] team0: Port device team_slave_0 added [ 70.257453][ T4848] team0: Port device team_slave_1 added [ 70.262880][ T4894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.278072][ T4894] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.290296][ T4894] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.290296][ T4894] [ 70.300038][ T4894] EXT4-fs (loop4): Total free blocks count 0 [ 70.306095][ T4894] EXT4-fs (loop4): Free/Dirty block details [ 70.312088][ T4894] EXT4-fs (loop4): free_blocks=2415919104 [ 70.317841][ T4894] EXT4-fs (loop4): dirty_blocks=64 [ 70.322952][ T4894] EXT4-fs (loop4): Block reservation details [ 70.328981][ T4894] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 70.345524][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 26 with max blocks 26 with error 28 [ 70.346426][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.364999][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.390987][ T4848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.411895][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.419000][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.445182][ T4848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.470893][ T4904] loop4: detected capacity change from 0 to 512 [ 70.499049][ T4904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.512398][ T4904] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.526744][ T4848] hsr_slave_0: entered promiscuous mode [ 70.534131][ T4848] hsr_slave_1: entered promiscuous mode [ 70.541002][ T4848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.549365][ T4848] Cannot create hsr debugfs directory [ 70.549590][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.589493][ T4912] loop4: detected capacity change from 0 to 2048 [ 70.600497][ T4910] syzkaller0: entered promiscuous mode [ 70.605968][ T4910] syzkaller0: entered allmulticast mode [ 70.608923][ T4912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.631692][ T36] bridge_slave_1: left allmulticast mode [ 70.637600][ T36] bridge_slave_1: left promiscuous mode [ 70.643247][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.659520][ T36] bridge_slave_0: left allmulticast mode [ 70.665188][ T36] bridge_slave_0: left promiscuous mode [ 70.670992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.693226][ T4916] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 70.709737][ T4916] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 70.722219][ T4916] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.722219][ T4916] [ 70.731939][ T4916] EXT4-fs (loop4): Total free blocks count 0 [ 70.737969][ T4916] EXT4-fs (loop4): Free/Dirty block details [ 70.743938][ T4916] EXT4-fs (loop4): free_blocks=66060288 [ 70.749595][ T4916] EXT4-fs (loop4): dirty_blocks=3552 [ 70.754889][ T4916] EXT4-fs (loop4): Block reservation details [ 70.760938][ T4916] EXT4-fs (loop4): i_reserved_data_blocks=255 [ 70.831482][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.843227][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.853683][ T36] bond0 (unregistering): Released all slaves [ 70.874917][ T4884] chnl_net:caif_netlink_parms(): no params data found [ 70.926957][ T36] hsr_slave_0: left promiscuous mode [ 70.933805][ T36] hsr_slave_1: left promiscuous mode [ 70.946021][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.953508][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.962045][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.964409][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 70.969462][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.997301][ T36] veth1_macvtap: left promiscuous mode [ 71.002800][ T36] veth0_macvtap: left promiscuous mode [ 71.008454][ T36] veth1_vlan: left promiscuous mode [ 71.013704][ T36] veth0_vlan: left promiscuous mode [ 71.041134][ T4922] loop0: detected capacity change from 0 to 512 [ 71.059347][ T4922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.072034][ T4922] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.117244][ T4594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.131277][ T36] team0 (unregistering): Port device team_slave_1 removed [ 71.141979][ T36] team0 (unregistering): Port device team_slave_0 removed [ 71.193057][ T4926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 71.204540][ T4929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4929 comm=syz.4.402 [ 71.227061][ T4811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.243006][ T4811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.269543][ T4811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.278711][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.285925][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.294886][ T4884] bridge_slave_0: entered allmulticast mode [ 71.301406][ T4884] bridge_slave_0: entered promiscuous mode [ 71.310609][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.317757][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.325541][ T4884] bridge_slave_1: entered allmulticast mode [ 71.331942][ T4884] bridge_slave_1: entered promiscuous mode [ 71.338614][ T4811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.363143][ T4884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.384735][ T4884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.429691][ T4884] team0: Port device team_slave_0 added [ 71.436745][ T4884] team0: Port device team_slave_1 added [ 71.440174][ T4941] loop0: detected capacity change from 0 to 4096 [ 71.451723][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.489096][ T4884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.496104][ T4884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.522424][ T4884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.537180][ T4884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.544149][ T4884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.570146][ T4884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.594818][ T4594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.601350][ T4946] loop4: detected capacity change from 0 to 1024 [ 71.610852][ T4946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.631648][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.643569][ T4949] loop0: detected capacity change from 0 to 256 [ 71.664967][ T4884] hsr_slave_0: entered promiscuous mode [ 71.671290][ T4884] hsr_slave_1: entered promiscuous mode [ 71.688150][ T4811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.701076][ T36] IPVS: stop unused estimator thread 0... [ 71.721242][ T4949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.731403][ T4949] FAT-fs (loop0): Filesystem has been set read-only [ 71.738300][ T4949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.777812][ T4594] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 71.785703][ T4594] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 71.801464][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.831658][ T4811] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.853198][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.867429][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.874523][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.891455][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.898612][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.908703][ T4848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.917597][ T4848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.926823][ T4848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.936013][ T4848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.951655][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.015172][ T4848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.033581][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.058644][ T4848] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.075757][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.082879][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.097306][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.104395][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.151286][ T36] bridge_slave_1: left allmulticast mode [ 72.157027][ T36] bridge_slave_1: left promiscuous mode [ 72.162657][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.172356][ T36] bridge_slave_0: left allmulticast mode [ 72.178060][ T36] bridge_slave_0: left promiscuous mode [ 72.183688][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.292667][ T36] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.303050][ T36] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.313132][ T36] € (unregistering): (slave dummy0): Releasing backup interface [ 72.323630][ T36] € (unregistering): Released all slaves [ 72.333389][ T4811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.390448][ T36] hsr_slave_0: left promiscuous mode [ 72.397800][ T36] hsr_slave_1: left promiscuous mode [ 72.403680][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.411275][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.420333][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.427792][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.447090][ T36] veth1_macvtap: left promiscuous mode [ 72.452596][ T36] veth0_macvtap: left promiscuous mode [ 72.458291][ T36] veth1_vlan: left promiscuous mode [ 72.463689][ T36] veth0_vlan: left promiscuous mode [ 72.517369][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.575060][ T36] team0 (unregistering): Port device team_slave_1 removed [ 72.586610][ T36] team0 (unregistering): Port device team_slave_0 removed [ 72.661400][ T4963] syzkaller0: entered promiscuous mode [ 72.666937][ T4963] syzkaller0: entered allmulticast mode [ 72.685787][ T4848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.721029][ T4811] veth0_vlan: entered promiscuous mode [ 72.754803][ T4811] veth1_vlan: entered promiscuous mode [ 72.793495][ T4811] veth0_macvtap: entered promiscuous mode [ 72.801072][ T4811] veth1_macvtap: entered promiscuous mode [ 72.845671][ T4848] veth0_vlan: entered promiscuous mode [ 72.852192][ T4884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.868583][ T4884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.877413][ T4884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.886599][ T4884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.920762][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.925020][ T4989] loop4: detected capacity change from 0 to 764 [ 72.931281][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.947415][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.957936][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.967825][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.978364][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.989743][ T4989] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 72.990481][ T4811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.009811][ T4964] chnl_net:caif_netlink_parms(): no params data found [ 73.025225][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.035716][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.045555][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.056005][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.065821][ T4811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.076244][ T4811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.087182][ T4811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.105828][ T4848] veth1_vlan: entered promiscuous mode [ 73.118743][ T4811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.127589][ T4811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.136315][ T4811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.145161][ T4811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.165315][ T4848] veth0_macvtap: entered promiscuous mode [ 73.196436][ T4848] veth1_macvtap: entered promiscuous mode [ 73.227510][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.253379][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.260517][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.267711][ T4964] bridge_slave_0: entered allmulticast mode [ 73.274104][ T4964] bridge_slave_0: entered promiscuous mode [ 73.285078][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.295591][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.305533][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.316039][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.325889][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.336343][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.346203][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.356842][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.377787][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.388577][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.395679][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.403499][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 73.403514][ T29] audit: type=1400 audit(1727352744.082:1762): avc: denied { write } for pid=4999 comm="syz.2.375" name="vlan0" dev="proc" ino=4026533072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.435342][ T4964] bridge_slave_1: entered allmulticast mode [ 73.442057][ T4964] bridge_slave_1: entered promiscuous mode [ 73.460534][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.473555][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.484156][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.494014][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.504478][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.514341][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.524823][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.534665][ T4848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.545104][ T4848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.564477][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.584569][ T4964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.597893][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.611887][ T4848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.620688][ T4848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.629444][ T4848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.638176][ T4848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.653682][ T4964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.678246][ T4964] team0: Port device team_slave_0 added [ 73.685008][ T4964] team0: Port device team_slave_1 added [ 73.704800][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.728813][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.735884][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.761922][ T4964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.775733][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.782729][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.808834][ T4964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.859404][ T5005] loop7: detected capacity change from 0 to 16384 [ 73.868597][ T4964] hsr_slave_0: entered promiscuous mode [ 73.875419][ T4964] hsr_slave_1: entered promiscuous mode [ 73.885193][ T4964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.892823][ T4964] Cannot create hsr debugfs directory [ 73.958333][ T4884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.020765][ T36] bridge_slave_1: left allmulticast mode [ 74.026519][ T36] bridge_slave_1: left promiscuous mode [ 74.032175][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.059819][ T36] bridge_slave_0: left allmulticast mode [ 74.065656][ T36] bridge_slave_0: left promiscuous mode [ 74.071312][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.210848][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.224827][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.224858][ T5012] loop4: detected capacity change from 0 to 4096 [ 74.241721][ T36] bond0 (unregistering): Released all slaves [ 74.245507][ T5012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.270781][ T4884] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.286398][ T5013] veth0_vlan: entered allmulticast mode [ 74.339222][ T36] hsr_slave_0: left promiscuous mode [ 74.345973][ T36] hsr_slave_1: left promiscuous mode [ 74.353600][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.361076][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.369213][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.376723][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.386302][ T36] veth1_vlan: left promiscuous mode [ 74.391728][ T36] veth0_vlan: left promiscuous mode [ 74.425424][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.481730][ T36] team0 (unregistering): Port device team_slave_1 removed [ 74.492641][ T36] team0 (unregistering): Port device team_slave_0 removed [ 74.540894][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.548102][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.584235][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.591431][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.690396][ T5004] I/O error, dev loop7, sector 11520 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 74.700587][ T5004] Buffer I/O error on dev loop7, logical block 1440, lost async page write [ 74.709294][ T5004] Buffer I/O error on dev loop7, logical block 1441, lost async page write [ 74.718032][ T5004] Buffer I/O error on dev loop7, logical block 1442, lost async page write [ 74.726645][ T5004] Buffer I/O error on dev loop7, logical block 1443, lost async page write [ 74.735307][ T5004] Buffer I/O error on dev loop7, logical block 1444, lost async page write [ 74.743989][ T5004] Buffer I/O error on dev loop7, logical block 1445, lost async page write [ 74.752649][ T5004] Buffer I/O error on dev loop7, logical block 1446, lost async page write [ 74.761364][ T5004] Buffer I/O error on dev loop7, logical block 1447, lost async page write [ 74.764270][ T4884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.770245][ T5004] Buffer I/O error on dev loop7, logical block 1448, lost async page write [ 74.770271][ T5004] Buffer I/O error on dev loop7, logical block 1449, lost async page write [ 74.813651][ T5004] I/O error, dev loop7, sector 12544 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 74.841445][ T5004] I/O error, dev loop7, sector 13568 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 74.859471][ T5004] I/O error, dev loop7, sector 14592 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 74.870999][ T4884] veth0_vlan: entered promiscuous mode [ 74.886087][ T5004] I/O error, dev loop7, sector 15616 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 74.918141][ T4884] veth1_vlan: entered promiscuous mode [ 74.940352][ T4884] veth0_macvtap: entered promiscuous mode [ 74.952009][ T4884] veth1_macvtap: entered promiscuous mode [ 74.974620][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.985193][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995238][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.005726][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.015565][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.026150][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.036185][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.046630][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.058947][ T4884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.071365][ T4964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.086743][ T4964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.098196][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.109274][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.119249][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.129890][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.139804][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.150454][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.160374][ T4884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.171000][ T4884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.183250][ T4884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.209941][ T4964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.220145][ T5042] bridge0: port 3(syz_tun) entered blocking state [ 75.226667][ T5042] bridge0: port 3(syz_tun) entered disabled state [ 75.235597][ T5042] syz_tun: entered allmulticast mode [ 75.242683][ T5042] syz_tun: entered promiscuous mode [ 75.248619][ T5042] bridge0: port 3(syz_tun) entered blocking state [ 75.255129][ T5042] bridge0: port 3(syz_tun) entered forwarding state [ 75.271457][ T4884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.280437][ T4884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.289305][ T4884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.298220][ T4884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.308991][ T4964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.319331][ T5038] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 75.330647][ T5043] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 75.424830][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.440616][ T5046] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 75.456329][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.466767][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.473913][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.485110][ T29] audit: type=1326 audit(1727352746.162:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 75.486303][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.508529][ T29] audit: type=1326 audit(1727352746.162:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ba3bfc8d0 code=0x7ffc0000 [ 75.515547][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.539024][ T29] audit: type=1326 audit(1727352746.162:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9ba3bff767 code=0x7ffc0000 [ 75.569566][ T29] audit: type=1326 audit(1727352746.162:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 75.592964][ T29] audit: type=1400 audit(1727352746.162:1767): avc: denied { create } for pid=5050 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.612396][ T29] audit: type=1326 audit(1727352746.162:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9ba3bff767 code=0x7ffc0000 [ 75.635752][ T29] audit: type=1326 audit(1727352746.162:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ba3bfcbca code=0x7ffc0000 [ 75.660234][ T29] audit: type=1326 audit(1727352746.162:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 75.695176][ T29] audit: type=1326 audit(1727352746.232:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 75.739109][ T4964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.839819][ T5065] loop1: detected capacity change from 0 to 4096 [ 75.882258][ T5065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.885712][ T4964] veth0_vlan: entered promiscuous mode [ 75.908008][ T4964] veth1_vlan: entered promiscuous mode [ 75.932238][ T4964] veth0_macvtap: entered promiscuous mode [ 75.954402][ T4964] veth1_macvtap: entered promiscuous mode [ 75.967600][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.978277][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.988153][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.998608][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.008455][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.018917][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.029050][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.039611][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.049840][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.060289][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.072286][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.102466][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.113025][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.123091][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.133716][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.143569][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.154075][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.164019][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.174718][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.184594][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.195581][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.206531][ T4848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.209738][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.225672][ T4964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.234458][ T4964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.243386][ T4964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.252125][ T4964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356082][ T5081] loop3: detected capacity change from 0 to 512 [ 76.362866][ T5081] EXT4-fs: Ignoring removed bh option [ 76.369161][ T5081] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 76.749568][ T5117] syzkaller0: entered promiscuous mode [ 76.755060][ T5117] syzkaller0: entered allmulticast mode [ 76.802689][ T5123] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 76.815871][ T5123] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 76.873217][ T5131] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 76.914831][ T5133] loop4: detected capacity change from 0 to 4096 [ 76.925208][ T5133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.051883][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.224198][ T5143] loop1: detected capacity change from 0 to 4096 [ 77.397722][ T5143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.555804][ T4848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.645762][ T5153] loop3: detected capacity change from 0 to 256 [ 77.653538][ T5153] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.773934][ T5156] loop1: detected capacity change from 0 to 8192 [ 77.848171][ T5160] bridge0: port 3(syz_tun) entered disabled state [ 77.867796][ T5160] syz_tun (unregistering): left allmulticast mode [ 77.874348][ T5160] syz_tun (unregistering): left promiscuous mode [ 77.880901][ T5160] bridge0: port 3(syz_tun) entered disabled state [ 78.099056][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.141306][ T5169] loop4: detected capacity change from 0 to 1024 [ 78.170832][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.186272][ T5169] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 78.204608][ T5171] loop2: detected capacity change from 0 to 4096 [ 78.212271][ T5169] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.237860][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.246871][ T5169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.268610][ T5171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.319491][ T5169] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.451: invalid block [ 78.333936][ T5169] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.451: invalid block [ 78.355127][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.682220][ T5180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.452'. [ 78.734109][ T5182] loop3: detected capacity change from 0 to 4096 [ 78.753939][ T5182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.806460][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 78.880367][ T4884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.938036][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.952498][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 78.954081][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 78.954099][ T29] audit: type=1400 audit(1727352749.632:1975): avc: denied { read } for pid=5190 comm="syz.1.458" path="socket:[13213]" dev="sockfs" ino=13213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.130663][ T5196] loop2: detected capacity change from 0 to 512 [ 79.144522][ T5196] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.155495][ T5196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.176723][ T5196] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 79.186784][ T5196] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 79.197634][ T5196] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.461: Failed to acquire dquot type 1 [ 79.334314][ T5208] loop3: detected capacity change from 0 to 512 [ 79.346153][ T5196] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.461: bg 0: block 40: padding at end of block bitmap is not set [ 79.362194][ T5208] EXT4-fs (loop3): 1 truncate cleaned up [ 79.369983][ T5208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.383484][ T5196] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 79.499227][ T5196] EXT4-fs (loop2): 1 truncate cleaned up [ 79.511029][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.930280][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.404756][ T4884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.461263][ T29] audit: type=1326 audit(1727352751.122:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.484933][ T29] audit: type=1326 audit(1727352751.122:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.508306][ T29] audit: type=1326 audit(1727352751.122:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.528539][ T5218] loop3: detected capacity change from 0 to 2048 [ 80.531721][ T29] audit: type=1326 audit(1727352751.132:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.548172][ T5217] loop2: detected capacity change from 0 to 1024 [ 80.561727][ T29] audit: type=1326 audit(1727352751.132:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.591379][ T29] audit: type=1326 audit(1727352751.132:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.614703][ T29] audit: type=1326 audit(1727352751.132:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5216 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 80.628326][ T5217] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.665697][ T5217] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.683822][ T5220] loop1: detected capacity change from 0 to 128 [ 80.705664][ T5217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.726073][ T5220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.740762][ T5218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.753794][ T5220] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.789559][ T5217] EXT4-fs error (device loop2): __ext4_iget:4952: inode #15: block 1803188595: comm syz.2.465: invalid block [ 80.804495][ T5217] EXT4-fs error (device loop2): __ext4_iget:4952: inode #15: block 1803188595: comm syz.2.465: invalid block [ 80.852669][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.898455][ T4848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.925853][ T5231] loop1: detected capacity change from 0 to 164 [ 80.939095][ T5231] Unable to read rock-ridge attributes [ 80.945875][ T5231] Unable to read rock-ridge attributes [ 80.949441][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.954965][ T5231] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 80.977891][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.986334][ T5234] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 81.008355][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.017389][ T5234] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1670 with error 28 [ 81.030074][ T5234] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.030074][ T5234] [ 81.039731][ T5234] EXT4-fs (loop3): Total free blocks count 0 [ 81.045721][ T5234] EXT4-fs (loop3): Free/Dirty block details [ 81.051728][ T5234] EXT4-fs (loop3): free_blocks=66060288 [ 81.057399][ T5234] EXT4-fs (loop3): dirty_blocks=2176 [ 81.062735][ T5234] EXT4-fs (loop3): Block reservation details [ 81.068816][ T5234] EXT4-fs (loop3): i_reserved_data_blocks=145 [ 81.251341][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 81.660477][ T5253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.476'. [ 81.964976][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 82.020979][ T5255] loop0: detected capacity change from 0 to 2048 [ 82.039410][ T5255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.045463][ T5263] loop2: detected capacity change from 0 to 128 [ 82.069146][ T4964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.163315][ T5274] loop0: detected capacity change from 0 to 512 [ 82.171725][ T5274] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.171730][ T5275] veth3: entered promiscuous mode [ 82.227951][ T5274] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.493: iget: bad i_size value: -6917529027641081756 [ 82.241364][ T5274] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.493: couldn't read orphan inode 17 (err -117) [ 82.241971][ T5274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.247613][ T5283] loop2: detected capacity change from 0 to 2048 [ 82.277479][ T5274] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.493: bg 0: block 65: padding at end of block bitmap is not set [ 82.292022][ T5274] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.493: Failed to acquire dquot type 0 [ 82.350752][ T5283] loop2: p1 < > p3 [ 82.359263][ T5293] loop4: detected capacity change from 0 to 164 [ 82.366439][ T5293] Unable to read rock-ridge attributes [ 82.368476][ T5283] loop2: p3 size 134217728 extends beyond EOD, truncated [ 82.384642][ T4964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.535459][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 82.544585][ T5304] syz_tun: left allmulticast mode [ 82.549666][ T5304] syz_tun: left promiscuous mode [ 82.554837][ T5304] bridge0: port 3(syz_tun) entered disabled state [ 82.744149][ T5304] bridge_slave_1: left allmulticast mode [ 82.749898][ T5304] bridge_slave_1: left promiscuous mode [ 82.755611][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.765992][ T5316] loop0: detected capacity change from 0 to 1024 [ 82.816850][ T5316] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.871104][ T5304] bridge_slave_0: left allmulticast mode [ 82.876995][ T5304] bridge_slave_0: left promiscuous mode [ 82.882706][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.895002][ T5316] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.498: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 82.916236][ T5316] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.498: couldn't read orphan inode 11 (err -117) [ 82.938972][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.332918][ T5322] syz.3.502[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.332974][ T5322] syz.3.502[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.335028][ T4964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.344427][ T5322] syz.3.502[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.402351][ T5320] loop2: detected capacity change from 0 to 2048 [ 83.468933][ T5320] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.478187][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.526766][ T5320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.629544][ T5343] loop0: detected capacity change from 0 to 4096 [ 83.649409][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.761936][ T4964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.002588][ T5355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.509'. [ 84.337012][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 84.337050][ T29] audit: type=1326 audit(1727352754.992:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.366876][ T29] audit: type=1326 audit(1727352754.992:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.390232][ T29] audit: type=1326 audit(1727352755.002:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.413622][ T29] audit: type=1326 audit(1727352755.002:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.437167][ T29] audit: type=1326 audit(1727352755.002:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.460532][ T29] audit: type=1326 audit(1727352755.002:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.483932][ T29] audit: type=1326 audit(1727352755.002:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.507482][ T29] audit: type=1326 audit(1727352755.002:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.530915][ T29] audit: type=1326 audit(1727352755.002:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.554436][ T29] audit: type=1326 audit(1727352755.002:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 84.665770][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.676241][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.218894][ T5372] loop0: detected capacity change from 0 to 1024 [ 85.225919][ T5372] EXT4-fs: Ignoring removed bh option [ 85.249137][ T5372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.270207][ T5378] loop2: detected capacity change from 0 to 512 [ 85.277125][ T5378] EXT4-fs: Ignoring removed oldalloc option [ 85.296629][ T5378] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.521: Parent and EA inode have the same ino 15 [ 85.309456][ T5378] EXT4-fs (loop2): Remounting filesystem read-only [ 85.310800][ T4964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.316194][ T5378] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 85.349192][ T5378] EXT4-fs (loop2): 1 orphan inode deleted [ 85.355672][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.370329][ T5378] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 85.377708][ T5378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.510628][ T5383] loop2: detected capacity change from 0 to 256 [ 85.537571][ T5383] FAT-fs (loop2): Directory bread(block 64) failed [ 85.544426][ T5383] FAT-fs (loop2): Directory bread(block 65) failed [ 85.552767][ T5383] FAT-fs (loop2): Directory bread(block 66) failed [ 85.559545][ T5383] FAT-fs (loop2): Directory bread(block 67) failed [ 85.566192][ T5383] FAT-fs (loop2): Directory bread(block 68) failed [ 85.574071][ T5383] FAT-fs (loop2): Directory bread(block 69) failed [ 85.582072][ T5383] FAT-fs (loop2): Directory bread(block 70) failed [ 85.588817][ T5383] FAT-fs (loop2): Directory bread(block 71) failed [ 85.595477][ T5383] FAT-fs (loop2): Directory bread(block 72) failed [ 85.603246][ T5383] FAT-fs (loop2): Directory bread(block 73) failed [ 85.629013][ T5388] loop1: detected capacity change from 0 to 128 [ 85.632656][ T5383] syz.2.523: attempt to access beyond end of device [ 85.632656][ T5383] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 85.645362][ T5388] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 85.649177][ T5383] syz.2.523: attempt to access beyond end of device [ 85.649177][ T5383] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 85.657094][ T5388] FAT-fs (loop1): Filesystem has been set read-only [ 85.676980][ T5388] syz.1.525: attempt to access beyond end of device [ 85.676980][ T5388] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.691075][ T5388] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 85.698975][ T5388] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 85.715961][ T5388] syz.1.525: attempt to access beyond end of device [ 85.715961][ T5388] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.730803][ T5388] syz.1.525: attempt to access beyond end of device [ 85.730803][ T5388] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.055451][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.161182][ T5398] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 86.173130][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.318787][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.380789][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.418698][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 86.463474][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.470766][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.478152][ T5401] bridge_slave_0: entered allmulticast mode [ 86.484722][ T5401] bridge_slave_0: entered promiscuous mode [ 86.493880][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.501066][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.508356][ T5401] bridge_slave_1: entered allmulticast mode [ 86.514734][ T5401] bridge_slave_1: entered promiscuous mode [ 86.539328][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.550142][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.559440][ T36] bridge_slave_1: left allmulticast mode [ 86.565116][ T36] bridge_slave_1: left promiscuous mode [ 86.570876][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.578596][ T36] bridge_slave_0: left allmulticast mode [ 86.584293][ T36] bridge_slave_0: left promiscuous mode [ 86.589992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.696728][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.699892][ T5419] loop0: detected capacity change from 0 to 512 [ 86.705363][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.716181][ T5419] EXT4-fs: Ignoring removed oldalloc option [ 86.718831][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.732481][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.740219][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.740814][ T5419] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.534: Parent and EA inode have the same ino 15 [ 86.747995][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.748024][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.760738][ T5419] EXT4-fs (loop0): Remounting filesystem read-only [ 86.767917][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.775555][ T5419] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 86.782175][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.789919][ T5419] EXT4-fs (loop0): 1 orphan inode deleted [ 86.799989][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.808074][ T5419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.813412][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.822249][ T5419] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 86.833109][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.833136][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.841757][ T5419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.847416][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.879512][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.887203][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.895065][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.902738][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.910523][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.918207][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.925862][ T3401] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 86.934631][ T3401] hid-generic 0000:1000003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 86.968466][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.978884][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.989667][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.001708][ T36] bond0 (unregistering): Released all slaves [ 87.029921][ T5425] netlink: 1812 bytes leftover after parsing attributes in process `syz.3.536'. [ 87.040925][ T5401] team0: Port device team_slave_0 added [ 87.052089][ T5401] team0: Port device team_slave_1 added [ 87.059903][ T36] hsr_slave_0: left promiscuous mode [ 87.065843][ T36] hsr_slave_1: left promiscuous mode [ 87.076446][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.083916][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.094537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.102523][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.126138][ T5430] loop2: detected capacity change from 0 to 128 [ 87.132791][ T36] veth1_macvtap: left promiscuous mode [ 87.138395][ T36] veth0_macvtap: left promiscuous mode [ 87.143978][ T36] veth1_vlan: left promiscuous mode [ 87.149249][ T36] veth0_vlan: left promiscuous mode [ 87.230903][ T5434] loop3: detected capacity change from 0 to 512 [ 87.294896][ T5434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.330373][ T36] team0 (unregistering): Port device team_slave_1 removed [ 87.338853][ T5434] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.356381][ T36] team0 (unregistering): Port device team_slave_0 removed [ 87.409409][ T4884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.431051][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.438453][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.464541][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.485511][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.492542][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.518506][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.545712][ T5444] syzkaller0: entered promiscuous mode [ 87.551252][ T5444] syzkaller0: entered allmulticast mode [ 87.593009][ T5401] hsr_slave_0: entered promiscuous mode [ 87.600285][ T5401] hsr_slave_1: entered promiscuous mode [ 87.606207][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.614421][ T5401] Cannot create hsr debugfs directory [ 87.693958][ T5452] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 87.890493][ T5469] loop0: detected capacity change from 0 to 128 [ 87.910750][ T5468] loop4: detected capacity change from 0 to 4096 [ 87.926122][ T5468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.013938][ T5401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.024636][ T5401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.034466][ T5401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.046432][ T5401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.105463][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.109133][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.127602][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.137598][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.144424][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.149779][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.159359][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.171248][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.178365][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.195975][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.246424][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.314277][ T5401] veth0_vlan: entered promiscuous mode [ 88.322591][ T5401] veth1_vlan: entered promiscuous mode [ 88.337592][ T5401] veth0_macvtap: entered promiscuous mode [ 88.344994][ T5401] veth1_macvtap: entered promiscuous mode [ 88.355085][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.366240][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.376069][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.386511][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.396415][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.406986][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.416807][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.427273][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.437095][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.447600][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.458560][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.469592][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.480200][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.490593][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.501034][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.510888][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.521422][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531239][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.541757][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.551598][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.562033][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.573604][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.583341][ T5401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.592156][ T5401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600995][ T5401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609731][ T5401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.677728][ T5497] loop1: detected capacity change from 0 to 1024 [ 88.684693][ T5497] EXT4-fs: Ignoring removed bh option [ 88.709368][ T5495] loop3: detected capacity change from 0 to 512 [ 88.749169][ T5495] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.762783][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.774530][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 88.785606][ T5495] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.798268][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.807589][ T5495] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.554: Failed to acquire dquot type 1 [ 88.823607][ T5495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.554: bg 0: block 40: padding at end of block bitmap is not set [ 88.841656][ T5495] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.853551][ T5495] EXT4-fs (loop3): 1 truncate cleaned up [ 88.973511][ T5509] loop1: detected capacity change from 0 to 1024 [ 88.980735][ T5509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.466289][ T5527] tipc: Started in network mode [ 89.471251][ T5527] tipc: Node identity ac14140f, cluster identity 4711 [ 89.507029][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 89.507049][ T29] audit: type=1400 audit(1727352760.142:2313): avc: denied { create } for pid=5526 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.543818][ T5527] tipc: New replicast peer: 255.255.255.255 [ 89.549987][ T5527] tipc: Enabled bearer , priority 10 [ 89.942502][ T29] audit: type=1326 audit(1727352760.622:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5879b4df39 code=0x7ffc0000 [ 89.981165][ T29] audit: type=1326 audit(1727352760.652:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5879b4c8d0 code=0x7ffc0000 [ 90.004544][ T29] audit: type=1326 audit(1727352760.652:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5879b4f767 code=0x7ffc0000 [ 90.028534][ T29] audit: type=1326 audit(1727352760.652:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5879b4df39 code=0x7ffc0000 [ 90.051783][ T29] audit: type=1326 audit(1727352760.652:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5879b4f767 code=0x7ffc0000 [ 90.075133][ T29] audit: type=1326 audit(1727352760.652:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5879b4cbca code=0x7ffc0000 [ 90.098309][ T29] audit: type=1326 audit(1727352760.652:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5879b4df39 code=0x7ffc0000 [ 90.121719][ T29] audit: type=1326 audit(1727352760.652:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5879b4df39 code=0x7ffc0000 [ 90.128866][ T5539] loop0: detected capacity change from 0 to 2048 [ 90.145041][ T29] audit: type=1326 audit(1727352760.652:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5879b4df39 code=0x7ffc0000 [ 90.211604][ T5534] loop4: detected capacity change from 0 to 128 [ 90.271932][ T5547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 90.286876][ T5547] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.286934][ T5547] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.286934][ T5547] [ 90.286952][ T5547] EXT4-fs (loop0): Total free blocks count 0 [ 90.287051][ T5547] EXT4-fs (loop0): Free/Dirty block details [ 90.287062][ T5547] EXT4-fs (loop0): free_blocks=66060288 [ 90.287075][ T5547] EXT4-fs (loop0): dirty_blocks=2736 [ 90.287089][ T5547] EXT4-fs (loop0): Block reservation details [ 90.287103][ T5547] EXT4-fs (loop0): i_reserved_data_blocks=171 [ 90.388743][ T5553] loop2: detected capacity change from 0 to 512 [ 90.396960][ T5553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.438134][ T5553] EXT4-fs (loop2): 1 truncate cleaned up [ 90.566969][ T3402] tipc: Node number set to 2886997007 [ 90.598102][ T156] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.610677][ T156] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.610677][ T156] [ 90.624594][ T5559] pim6reg: entered allmulticast mode [ 90.804069][ T5567] loop2: detected capacity change from 0 to 128 [ 90.812715][ T5567] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 91.114005][ T5575] loop2: detected capacity change from 0 to 1024 [ 91.140197][ T5575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.760680][ T5590] loop1: detected capacity change from 0 to 8192 [ 91.778485][ T5590] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007' [ 91.956719][ T5604] loop0: detected capacity change from 0 to 164 [ 91.979044][ T5604] iso9660: Unknown parameter '' [ 92.018872][ T5609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 92.087641][ T5611] loop0: detected capacity change from 0 to 2048 [ 92.138839][ T5611] loop0: p1 < > p4 [ 92.143092][ T5611] loop0: p4 size 8388608 extends beyond EOD, truncated [ 92.224709][ T5622] loop0: detected capacity change from 0 to 512 [ 92.233093][ T5622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.247416][ T5622] EXT4-fs (loop0): 1 orphan inode deleted [ 92.253254][ T5622] EXT4-fs (loop0): 1 truncate cleaned up [ 92.258788][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.269444][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.300008][ T5640] loop3: detected capacity change from 0 to 2048 [ 93.322029][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.331089][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.340694][ T5646] bridge0: entered allmulticast mode [ 93.341464][ T5640] Alternate GPT is invalid, using primary GPT. [ 93.352948][ T5640] loop3: p1 p2 p3 [ 93.374299][ T5646] bridge_slave_1: left allmulticast mode [ 93.381021][ T5646] bridge_slave_1: left promiscuous mode [ 93.388019][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.400935][ T5646] bridge_slave_0: left allmulticast mode [ 93.403101][ T5653] loop3: detected capacity change from 0 to 512 [ 93.409980][ T5646] bridge_slave_0: left promiscuous mode [ 93.413749][ T5653] EXT4-fs: Ignoring removed i_version option [ 93.422474][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.425890][ T5653] EXT4-fs: Ignoring removed nobh option [ 93.439315][ T5653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.441267][ T5653] EXT4-fs (loop3): 1 truncate cleaned up [ 93.537496][ T5660] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.560475][ T5658] bridge0: port 3(veth0_to_bond) entered blocking state [ 93.567570][ T5658] bridge0: port 3(veth0_to_bond) entered disabled state [ 93.574659][ T5658] veth0_to_bond: entered allmulticast mode [ 93.581641][ T5658] veth0_to_bond: entered promiscuous mode [ 93.587692][ T5658] bridge0: port 3(veth0_to_bond) entered blocking state [ 93.594662][ T5658] bridge0: port 3(veth0_to_bond) entered forwarding state [ 93.639757][ T5665] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 93.647619][ T5665] netlink: 'syz.3.614': attribute type 2 has an invalid length. [ 93.658455][ T5666] loop2: detected capacity change from 0 to 512 [ 93.664991][ T5666] EXT4-fs: Ignoring removed bh option [ 93.678219][ T5666] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 93.716345][ T5666] EXT4-fs (loop2): 1 truncate cleaned up [ 93.722233][ T5672] loop3: detected capacity change from 0 to 512 [ 93.750944][ T5672] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.766941][ T5666] loop2: detected capacity change from 512 to 64 [ 93.801403][ T5666] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 19: block 141:freeing already freed block (bit 140); block bitmap corrupt. [ 93.829031][ T5663] EXT4-fs (loop2): pa ffff88810682d850: logic 0, phys. 129, len 64 [ 93.837096][ T5663] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 52, pa_free 50 [ 93.899091][ T5677] loop2: detected capacity change from 0 to 512 [ 93.908850][ T5677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.929808][ T5677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 93.944721][ T5677] EXT4-fs (loop2): 1 truncate cleaned up [ 94.208101][ T5712] loop3: detected capacity change from 0 to 2048 [ 94.226216][ T5717] loop0: detected capacity change from 0 to 1024 [ 94.233076][ T5717] EXT4-fs: Ignoring removed nobh option [ 94.235304][ T5712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.238697][ T5717] EXT4-fs: Ignoring removed orlov option [ 94.259458][ T5712] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 94.271790][ T5712] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.271790][ T5712] [ 94.281643][ T5712] EXT4-fs (loop3): Total free blocks count 0 [ 94.287712][ T5712] EXT4-fs (loop3): Free/Dirty block details [ 94.293722][ T5712] EXT4-fs (loop3): free_blocks=2415919104 [ 94.299674][ T5712] EXT4-fs (loop3): dirty_blocks=16 [ 94.304821][ T5712] EXT4-fs (loop3): Block reservation details [ 94.310866][ T5712] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 94.334018][ T5730] loop2: detected capacity change from 0 to 128 [ 94.375018][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 94.387748][ T5735] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 94.423499][ T5712] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.445162][ T5712] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.445162][ T5712] [ 94.530909][ T29] kauditd_printk_skb: 874 callbacks suppressed [ 94.530927][ T29] audit: type=1326 audit(1727352765.212:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 94.562981][ T29] audit: type=1326 audit(1727352765.242:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 94.586389][ T29] audit: type=1326 audit(1727352765.242:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355eddf39 code=0x7ffc0000 [ 94.648727][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 94.657698][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 94.706236][ T5749] loop2: detected capacity change from 0 to 512 [ 94.713454][ T5749] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.722835][ T5749] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 94.733072][ T5749] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 94.743586][ T5749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 94.753059][ T5749] System zones: 0-2, 18-18, 34-34 [ 94.758823][ T5749] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.775439][ T5749] EXT4-fs (loop2): 1 truncate cleaned up [ 94.797107][ T5749] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.2.630: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 94.817808][ T5749] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 94.872406][ T5756] loop2: detected capacity change from 0 to 128 [ 95.157225][ T35] IPVS: starting estimator thread 0... [ 95.247057][ T5762] IPVS: using max 2448 ests per chain, 122400 per kthread [ 95.387433][ T5766] random: crng reseeded on system resumption [ 95.390516][ T29] audit: type=1400 audit(1727352766.072:3200): avc: denied { write } for pid=5765 comm="syz.3.636" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.418791][ T5768] loop1: detected capacity change from 0 to 256 [ 95.461508][ T5769] loop3: detected capacity change from 0 to 512 [ 95.475207][ T5771] 9pnet_fd: p9_fd_create_tcp (5771): problem connecting socket to 127.0.0.1 [ 95.485903][ T5769] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.508827][ T29] audit: type=1326 audit(1727352766.192:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.532249][ T29] audit: type=1326 audit(1727352766.192:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.555684][ T29] audit: type=1326 audit(1727352766.192:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.579158][ T29] audit: type=1326 audit(1727352766.192:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.602530][ T29] audit: type=1326 audit(1727352766.192:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.625853][ T29] audit: type=1326 audit(1727352766.192:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ba3bfdf39 code=0x7ffc0000 [ 95.661436][ T5778] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 95.695716][ T5780] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 95.768879][ T5782] loop4: detected capacity change from 0 to 512 [ 95.775693][ T5782] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.810553][ T5782] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.644: corrupted in-inode xattr: invalid ea_ino [ 95.826727][ T3386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.866592][ T5782] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.644: couldn't read orphan inode 15 (err -117) [ 95.900400][ T3386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.971735][ T3386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.009057][ T5800] loop3: detected capacity change from 0 to 128 [ 96.072543][ T5809] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 96.090596][ T5809] team0: Device hsr_slave_0 failed to register rx_handler [ 96.106871][ T5800] syz.3.648: attempt to access beyond end of device [ 96.106871][ T5800] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 96.130540][ T3386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.178796][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 96.222493][ T5799] syz.3.648: attempt to access beyond end of device [ 96.222493][ T5799] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 96.249705][ T3386] bridge_slave_1: left allmulticast mode [ 96.255501][ T3386] bridge_slave_1: left promiscuous mode [ 96.261237][ T3386] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.276949][ T5799] syz.3.648: attempt to access beyond end of device [ 96.276949][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.293621][ T5799] syz.3.648: attempt to access beyond end of device [ 96.293621][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.309855][ T3386] bridge_slave_0: left allmulticast mode [ 96.315592][ T3386] bridge_slave_0: left promiscuous mode [ 96.321376][ T3386] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.330764][ T5799] syz.3.648: attempt to access beyond end of device [ 96.330764][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.345183][ T5799] syz.3.648: attempt to access beyond end of device [ 96.345183][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.358507][ T5799] syz.3.648: attempt to access beyond end of device [ 96.358507][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.371923][ T5799] syz.3.648: attempt to access beyond end of device [ 96.371923][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.385109][ T5799] syz.3.648: attempt to access beyond end of device [ 96.385109][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.435737][ T5820] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 96.436353][ T5799] syz.3.648: attempt to access beyond end of device [ 96.436353][ T5799] loop3: rw=0, sector=177, nr_sectors = 8 limit=128 [ 96.521083][ T5787] coredump: 131(syz.3.645): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 96.552852][ T3386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.569751][ T3386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.588221][ T3386] bond0 (unregistering): Released all slaves [ 96.612404][ T5829] loop3: detected capacity change from 0 to 2048 [ 96.653403][ T5832] loop2: detected capacity change from 0 to 512 [ 96.662009][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.669121][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.686206][ T5791] bridge_slave_0: entered allmulticast mode [ 96.695456][ T5832] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.713719][ T5791] bridge_slave_0: entered promiscuous mode [ 96.721323][ T5832] Process accounting resumed [ 96.729358][ T5832] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 96.741152][ T3386] hsr_slave_0: left promiscuous mode [ 96.747282][ T3386] hsr_slave_1: left promiscuous mode [ 96.764389][ T3386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.771859][ T3386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.789328][ T3386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.797179][ T3386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.812974][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 96.822167][ T3386] veth1_macvtap: left promiscuous mode [ 96.827806][ T3386] veth0_macvtap: left promiscuous mode [ 96.833353][ T3386] veth1_vlan: left promiscuous mode [ 96.838683][ T3386] veth0_vlan: left promiscuous mode [ 96.862113][ T5843] mmap: syz.2.663 (5843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.934185][ T3386] team0 (unregistering): Port device team_slave_1 removed [ 96.944518][ T3386] team0 (unregistering): Port device team_slave_0 removed [ 96.982818][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.989924][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.997146][ T5791] bridge_slave_1: entered allmulticast mode [ 97.003791][ T5791] bridge_slave_1: entered promiscuous mode [ 97.027299][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.040054][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.060089][ T5791] team0: Port device team_slave_0 added [ 97.066624][ T5791] team0: Port device team_slave_1 added [ 97.082132][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.089206][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.115146][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.126457][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.133455][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.143352][ T5853] loop2: detected capacity change from 0 to 1024 [ 97.159601][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.168161][ T5853] EXT4-fs: Ignoring removed nobh option [ 97.181971][ T5853] EXT4-fs: Ignoring removed orlov option [ 97.195654][ T5791] hsr_slave_0: entered promiscuous mode [ 97.202549][ T5791] hsr_slave_1: entered promiscuous mode [ 97.208703][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.216414][ T5791] Cannot create hsr debugfs directory [ 97.427362][ T5860] pim6reg1: entered promiscuous mode [ 97.432714][ T5860] pim6reg1: entered allmulticast mode [ 97.480459][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.489306][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.497900][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.506347][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.521083][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.528236][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.535596][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.542661][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.572607][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.584020][ T3386] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.595024][ T3386] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.613481][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.625342][ T3386] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.632488][ T3386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.643659][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.650773][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.727043][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.825831][ T5791] veth0_vlan: entered promiscuous mode [ 97.834597][ T5791] veth1_vlan: entered promiscuous mode [ 97.853961][ T5791] veth0_macvtap: entered promiscuous mode [ 97.863460][ T5791] veth1_macvtap: entered promiscuous mode [ 97.874475][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.885010][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.894975][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.905556][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.915449][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.925922][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.935887][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.946338][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.956249][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.966839][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.979983][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.999612][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.010161][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.020033][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.030579][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.040432][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.050935][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.060972][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.071419][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.081278][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.091731][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.103195][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.113070][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.121979][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130757][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.139599][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.181837][ T5898] loop1: detected capacity change from 0 to 1024 [ 98.188893][ T5898] EXT4-fs: Ignoring removed orlov option [ 98.194581][ T5898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.208746][ T5898] EXT4-fs mount: 38 callbacks suppressed [ 98.208762][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.302922][ T5898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 98.328374][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.351688][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.387883][ T5907] loop2: detected capacity change from 0 to 128 [ 98.445146][ T5911] loop2: detected capacity change from 0 to 512 [ 98.452292][ T5911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.478712][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.491371][ T5911] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.503582][ T5911] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.680: Failed to acquire dquot type 0 [ 98.525005][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.874473][ T5932] veth0_vlan: entered allmulticast mode [ 99.090925][ T5935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.125189][ T5937] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 99.188512][ T5939] loop3: detected capacity change from 0 to 1024 [ 99.196209][ T5939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.207211][ T5939] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.689: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 99.239880][ T5939] EXT4-fs error (device loop3): ext4_quota_enable:7056: comm syz.3.689: Bad quota inode: 3, type: 0 [ 99.251772][ T5939] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.269308][ T5939] EXT4-fs (loop3): mount failed [ 99.344357][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'. [ 99.388662][ T5955] loop1: detected capacity change from 0 to 1024 [ 99.391504][ T5957] pim6reg1: entered promiscuous mode [ 99.395354][ T5955] EXT4-fs: Ignoring removed orlov option [ 99.400380][ T5957] pim6reg1: entered allmulticast mode [ 99.410187][ T5957] syzkaller0: entered allmulticast mode [ 99.411494][ T5955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.450031][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.478238][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.539970][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 99.539988][ T29] audit: type=1326 audit(1727352770.222:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04e5e84ee7 code=0x7ffc0000 [ 99.569519][ T29] audit: type=1326 audit(1727352770.222:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04e5e298a9 code=0x7ffc0000 [ 99.592887][ T29] audit: type=1326 audit(1727352770.222:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 99.616463][ T29] audit: type=1326 audit(1727352770.222:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04e5e84ee7 code=0x7ffc0000 [ 99.639752][ T29] audit: type=1326 audit(1727352770.222:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04e5e298a9 code=0x7ffc0000 [ 99.663026][ T29] audit: type=1326 audit(1727352770.222:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 99.686424][ T29] audit: type=1326 audit(1727352770.222:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04e5e84ee7 code=0x7ffc0000 [ 99.709800][ T29] audit: type=1326 audit(1727352770.222:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04e5e298a9 code=0x7ffc0000 [ 99.733070][ T29] audit: type=1326 audit(1727352770.222:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e5e8df39 code=0x7ffc0000 [ 99.758066][ T29] audit: type=1326 audit(1727352770.252:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04e5e84ee7 code=0x7ffc0000 [ 99.794857][ T5965] loop3: detected capacity change from 0 to 512 [ 99.808823][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.823567][ T5965] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.849473][ T4884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.875232][ T5972] random: crng reseeded on system resumption [ 99.929634][ T5974] tipc: Started in network mode [ 99.934659][ T5974] tipc: Node identity ac14140f, cluster identity 4711 [ 99.943439][ T5976] loop2: detected capacity change from 0 to 512 [ 99.943660][ T5974] tipc: New replicast peer: 255.255.255.255 [ 99.956226][ T5974] tipc: Enabled bearer , priority 10 [ 99.981513][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.994148][ T5976] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.033649][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.116781][ T5990] loop2: detected capacity change from 0 to 512 [ 100.137606][ T5990] EXT4-fs: Ignoring removed i_version option [ 100.148525][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 100.154541][ T5996] loop4: detected capacity change from 0 to 2048 [ 100.157092][ T5995] syz.1.707[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.163234][ T5990] System zones: [ 100.167717][ T5995] syz.1.707[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.174666][ T5990] 1-12 [ 100.188550][ T5995] syz.1.707[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.189495][ T5990] [ 100.208226][ T5995] wg2: entered promiscuous mode [ 100.213168][ T5995] wg2: entered allmulticast mode [ 100.223977][ T5990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.706: bg 0: block 131: padding at end of block bitmap is not set [ 100.242100][ T5990] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 100.250735][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.264788][ T5990] EXT4-fs (loop2): 1 truncate cleaned up [ 100.264893][ T5996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.270884][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.287257][ T5996] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 100.310108][ T5996] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.310108][ T5996] [ 100.319901][ T5996] EXT4-fs (loop4): Total free blocks count 0 [ 100.322928][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 100.325897][ T5996] EXT4-fs (loop4): Free/Dirty block details [ 100.340642][ T5996] EXT4-fs (loop4): free_blocks=2415919104 [ 100.346384][ T5996] EXT4-fs (loop4): dirty_blocks=16 [ 100.351651][ T5996] EXT4-fs (loop4): Block reservation details [ 100.357673][ T5996] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 100.372658][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.397311][ T6012] loop2: detected capacity change from 0 to 512 [ 100.419016][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.431829][ T6012] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.449537][ T5996] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 100.462527][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.947676][ T3402] tipc: Node number set to 2886997007 [ 101.086334][ T6037] loop1: detected capacity change from 0 to 256 [ 101.093951][ T6037] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.138333][ T6041] loop2: detected capacity change from 0 to 2048 [ 101.149050][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.199092][ T6047] netlink: 'syz.4.722': attribute type 3 has an invalid length. [ 101.219599][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.351457][ T6059] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.726'. [ 101.364122][ T6058] loop4: detected capacity change from 0 to 512 [ 101.372230][ T6058] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 16: comm syz.4.727: invalid block [ 101.383325][ T6058] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.727: couldn't read orphan inode 11 (err -117) [ 101.395274][ T6058] EXT4-fs (loop4): 1 truncate cleaned up [ 101.401419][ T6058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.426379][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.750561][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.805456][ T6073] loop3: detected capacity change from 0 to 1024 [ 101.812705][ T6073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.823880][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.933463][ T6073] ================================================================== [ 101.941597][ T6073] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 101.950853][ T6073] [ 101.953213][ T6073] write to 0xffff888106ab6eb8 of 4 bytes by task 6075 on cpu 0: [ 101.960954][ T6073] writeback_single_inode+0x14f/0x3f0 [ 101.966369][ T6073] sync_inode_metadata+0x5c/0x90 [ 101.971340][ T6073] generic_buffers_fsync_noflush+0xd8/0x120 [ 101.977266][ T6073] ext4_sync_file+0x1ff/0x6c0 [ 101.982077][ T6073] vfs_fsync_range+0x116/0x130 [ 101.986869][ T6073] ext4_buffered_write_iter+0x326/0x370 [ 101.992465][ T6073] ext4_file_write_iter+0x293/0xe10 [ 101.997732][ T6073] iter_file_splice_write+0x5f1/0x980 [ 102.003135][ T6073] direct_splice_actor+0x160/0x2c0 [ 102.008282][ T6073] splice_direct_to_actor+0x302/0x670 [ 102.013686][ T6073] do_splice_direct+0xd7/0x150 [ 102.018498][ T6073] do_sendfile+0x39b/0x970 [ 102.022951][ T6073] __x64_sys_sendfile64+0x110/0x150 [ 102.028168][ T6073] x64_sys_call+0xed5/0x2d60 [ 102.032828][ T6073] do_syscall_64+0xc9/0x1c0 [ 102.037358][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.043286][ T6073] [ 102.045620][ T6073] read to 0xffff888106ab6eb8 of 4 bytes by task 6073 on cpu 1: [ 102.053176][ T6073] generic_buffers_fsync_noflush+0x83/0x120 [ 102.059112][ T6073] ext4_sync_file+0x1ff/0x6c0 [ 102.063828][ T6073] vfs_fsync_range+0x116/0x130 [ 102.068623][ T6073] ext4_buffered_write_iter+0x326/0x370 [ 102.074216][ T6073] ext4_file_write_iter+0x293/0xe10 [ 102.079452][ T6073] iter_file_splice_write+0x5f1/0x980 [ 102.084884][ T6073] direct_splice_actor+0x160/0x2c0 [ 102.090116][ T6073] splice_direct_to_actor+0x302/0x670 [ 102.095525][ T6073] do_splice_direct+0xd7/0x150 [ 102.100316][ T6073] do_sendfile+0x39b/0x970 [ 102.104754][ T6073] __x64_sys_sendfile64+0x110/0x150 [ 102.109973][ T6073] x64_sys_call+0xed5/0x2d60 [ 102.114602][ T6073] do_syscall_64+0xc9/0x1c0 [ 102.119147][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.125079][ T6073] [ 102.127425][ T6073] value changed: 0x00000038 -> 0x00000002 [ 102.133176][ T6073] [ 102.135502][ T6073] Reported by Kernel Concurrency Sanitizer on: [ 102.141657][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.3.734 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 102.153399][ T6073] Tainted: [W]=WARN [ 102.157208][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.167275][ T6073] ================================================================== [ 102.678377][ T6073] syz.3.734 (6073) used greatest stack depth: 9528 bytes left [ 102.687829][ T4884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.