last executing test programs: 4.512200213s ago: executing program 3 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.459559013s ago: executing program 3 (id=273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 4.424695404s ago: executing program 3 (id=274): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 4.309138256s ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@sysvgroups}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000001cc0), 0x80000) 4.090292149s ago: executing program 3 (id=285): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 3.664038905s ago: executing program 3 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 3.663604965s ago: executing program 32 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 1.945482201s ago: executing program 2 (id=342): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x0) 1.829070983s ago: executing program 2 (id=343): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrjquota}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x1) 1.575919346s ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x8000a9ed, 0x10, 0x2, 0x25}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x109880, 0x31713}) io_uring_enter(r2, 0x3516, 0xcf9f, 0x66, 0x0, 0x0) 1.566601976s ago: executing program 4 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0x9, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.431966808s ago: executing program 0 (id=353): open(0x0, 0x40c5, 0x24) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 1.404299729s ago: executing program 2 (id=354): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0xe148}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) 1.215813162s ago: executing program 0 (id=356): iopl(0x3) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 1.215265142s ago: executing program 4 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.145251033s ago: executing program 4 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.089237154s ago: executing program 4 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a8", 0xb}, {&(0x7f0000000280)="1b0e88a8e1", 0x5}], 0x3) 819.930608ms ago: executing program 4 (id=367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 756.522469ms ago: executing program 4 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @loopback={0x5f2d, 0x3a}, 0x33a}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 595.584041ms ago: executing program 1 (id=370): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0x0, 0x5}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de, 0x5}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0x10, 0x0, 0x5, 0x0, 0x8000000000000001}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x10000}}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 548.312332ms ago: executing program 2 (id=371): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 538.713642ms ago: executing program 1 (id=372): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0xfffffffffffffffa, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6}) 379.197514ms ago: executing program 2 (id=373): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") 370.820014ms ago: executing program 1 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 295.717755ms ago: executing program 0 (id=374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000000300"], 0xd0}}, 0x0) 286.223105ms ago: executing program 1 (id=375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ff9}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272", 0xf4, 0x4040004, 0x0, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 158.724078ms ago: executing program 1 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 146.266908ms ago: executing program 0 (id=377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3011) 104.926669ms ago: executing program 1 (id=378): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 102.584418ms ago: executing program 0 (id=379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000380)=0x1040, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 99.386769ms ago: executing program 5 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 69.997409ms ago: executing program 5 (id=380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90) 33.55891ms ago: executing program 5 (id=381): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@errors_remount}]}, 0x1, 0x7a2, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="8f", 0x1}], 0x1, 0x10000, 0x7fffffff, 0x0) fallocate(r0, 0x0, 0x803, 0x2000404) 0s ago: executing program 0 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 35.061586][ T29] audit: type=1400 audit(1752101273.012:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.062750][ T3296] cgroup: Unknown subsys name 'net' [ 35.084670][ T29] audit: type=1400 audit(1752101273.012:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.112075][ T29] audit: type=1400 audit(1752101273.032:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.232343][ T3296] cgroup: Unknown subsys name 'cpuset' [ 35.238620][ T3296] cgroup: Unknown subsys name 'rlimit' [ 35.349903][ T29] audit: type=1400 audit(1752101273.292:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.373271][ T29] audit: type=1400 audit(1752101273.302:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.393924][ T29] audit: type=1400 audit(1752101273.302:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.410664][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.414363][ T29] audit: type=1400 audit(1752101273.302:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.443476][ T29] audit: type=1400 audit(1752101273.312:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.451979][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.468396][ T29] audit: type=1400 audit(1752101273.312:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.500532][ T29] audit: type=1400 audit(1752101273.372:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.569912][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.603051][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 37.634581][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 37.678385][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.685532][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.693059][ T3314] bridge_slave_0: entered allmulticast mode [ 37.699572][ T3314] bridge_slave_0: entered promiscuous mode [ 37.719554][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.726698][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.734016][ T3314] bridge_slave_1: entered allmulticast mode [ 37.740332][ T3314] bridge_slave_1: entered promiscuous mode [ 37.746798][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.755676][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.792008][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.799219][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.806745][ T3307] bridge_slave_0: entered allmulticast mode [ 37.813326][ T3307] bridge_slave_0: entered promiscuous mode [ 37.828933][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.847372][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.854535][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.861926][ T3307] bridge_slave_1: entered allmulticast mode [ 37.868430][ T3307] bridge_slave_1: entered promiscuous mode [ 37.880243][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.913695][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.920877][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.929057][ T3306] bridge_slave_0: entered allmulticast mode [ 37.935560][ T3306] bridge_slave_0: entered promiscuous mode [ 37.942334][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.949504][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.956772][ T3306] bridge_slave_1: entered allmulticast mode [ 37.963966][ T3306] bridge_slave_1: entered promiscuous mode [ 37.978957][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.006059][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.015796][ T3314] team0: Port device team_slave_0 added [ 38.022693][ T3314] team0: Port device team_slave_1 added [ 38.052600][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.059684][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.066852][ T3311] bridge_slave_0: entered allmulticast mode [ 38.073368][ T3311] bridge_slave_0: entered promiscuous mode [ 38.080719][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.100520][ T3307] team0: Port device team_slave_0 added [ 38.111536][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.118620][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.125986][ T3311] bridge_slave_1: entered allmulticast mode [ 38.132467][ T3311] bridge_slave_1: entered promiscuous mode [ 38.139528][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.153985][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.161079][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.168268][ T3313] bridge_slave_0: entered allmulticast mode [ 38.174856][ T3313] bridge_slave_0: entered promiscuous mode [ 38.181878][ T3307] team0: Port device team_slave_1 added [ 38.187581][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.194756][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.202134][ T3313] bridge_slave_1: entered allmulticast mode [ 38.208545][ T3313] bridge_slave_1: entered promiscuous mode [ 38.215240][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.222312][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.248277][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.259442][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.266436][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.292674][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.330307][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.351317][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.361136][ T3306] team0: Port device team_slave_0 added [ 38.367767][ T3306] team0: Port device team_slave_1 added [ 38.374408][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.383932][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.390885][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.417017][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.428864][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.435875][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.461879][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.473764][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.511236][ T3314] hsr_slave_0: entered promiscuous mode [ 38.517293][ T3314] hsr_slave_1: entered promiscuous mode [ 38.538725][ T3311] team0: Port device team_slave_0 added [ 38.545557][ T3311] team0: Port device team_slave_1 added [ 38.552263][ T3313] team0: Port device team_slave_0 added [ 38.558389][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.565415][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.591397][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.602644][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.609606][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.635579][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.657276][ T3313] team0: Port device team_slave_1 added [ 38.688099][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.695186][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.721143][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.732838][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.739825][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.765798][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.800082][ T3307] hsr_slave_0: entered promiscuous mode [ 38.806274][ T3307] hsr_slave_1: entered promiscuous mode [ 38.812200][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.819799][ T3307] Cannot create hsr debugfs directory [ 38.828719][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.835733][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.861850][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.873351][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.880338][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.906478][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.942556][ T3306] hsr_slave_0: entered promiscuous mode [ 38.948680][ T3306] hsr_slave_1: entered promiscuous mode [ 38.954542][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.962169][ T3306] Cannot create hsr debugfs directory [ 39.002305][ T3311] hsr_slave_0: entered promiscuous mode [ 39.008393][ T3311] hsr_slave_1: entered promiscuous mode [ 39.014361][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.021997][ T3311] Cannot create hsr debugfs directory [ 39.061541][ T3313] hsr_slave_0: entered promiscuous mode [ 39.067669][ T3313] hsr_slave_1: entered promiscuous mode [ 39.073657][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.081229][ T3313] Cannot create hsr debugfs directory [ 39.214162][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.223068][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.241652][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.250577][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.277276][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.286509][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.296681][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.313552][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.342340][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.351755][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.365368][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.374904][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.406561][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.422867][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.438218][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.447385][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.456050][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.485868][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.498672][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.509710][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.516877][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.529530][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.538376][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.549432][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.556544][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.570096][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.593594][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.627404][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.647848][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.655022][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.675455][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.682640][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.711796][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.726375][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.748687][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.761458][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.774281][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.781426][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.797837][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.805223][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.814391][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.821482][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.839039][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.849136][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.857948][ T2638] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.865120][ T2638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.899572][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.933869][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.941086][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.963686][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.970777][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.989235][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.023599][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.079703][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.117119][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.127771][ T3314] veth0_vlan: entered promiscuous mode [ 40.148255][ T3314] veth1_vlan: entered promiscuous mode [ 40.164641][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.212459][ T3314] veth0_macvtap: entered promiscuous mode [ 40.242795][ T3314] veth1_macvtap: entered promiscuous mode [ 40.258541][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.285931][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.314746][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.336999][ T3306] veth0_vlan: entered promiscuous mode [ 40.347810][ T3311] veth0_vlan: entered promiscuous mode [ 40.355580][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.364397][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.373206][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.382170][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.404110][ T3306] veth1_vlan: entered promiscuous mode [ 40.412108][ T3311] veth1_vlan: entered promiscuous mode [ 40.442800][ T3306] veth0_macvtap: entered promiscuous mode [ 40.456833][ T3306] veth1_macvtap: entered promiscuous mode [ 40.463481][ T3313] veth0_vlan: entered promiscuous mode [ 40.473849][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.489902][ T3307] veth0_vlan: entered promiscuous mode [ 40.497284][ T3313] veth1_vlan: entered promiscuous mode [ 40.509711][ T3311] veth0_macvtap: entered promiscuous mode [ 40.519886][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.519901][ T29] audit: type=1400 audit(1752101278.462:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.SmTXQK/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.522784][ T3307] veth1_vlan: entered promiscuous mode [ 40.526091][ T29] audit: type=1400 audit(1752101278.462:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.562530][ T3307] veth0_macvtap: entered promiscuous mode [ 40.578327][ T29] audit: type=1400 audit(1752101278.462:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.SmTXQK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.588933][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.609225][ T29] audit: type=1400 audit(1752101278.462:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.627425][ T3307] veth1_macvtap: entered promiscuous mode [ 40.638306][ T29] audit: type=1400 audit(1752101278.462:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.SmTXQK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.657439][ T3313] veth0_macvtap: entered promiscuous mode [ 40.670795][ T29] audit: type=1400 audit(1752101278.462:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.SmTXQK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.703880][ T29] audit: type=1400 audit(1752101278.462:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.706283][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.731595][ T29] audit: type=1400 audit(1752101278.502:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.732376][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.755027][ T29] audit: type=1400 audit(1752101278.502:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.763698][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.795440][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.810212][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.820060][ T3313] veth1_macvtap: entered promiscuous mode [ 40.827173][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.830301][ T3311] veth1_macvtap: entered promiscuous mode [ 40.851936][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.870698][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.879876][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.888827][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.897593][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.911697][ T29] audit: type=1400 audit(1752101278.812:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.947698][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.955501][ T3477] loop0: detected capacity change from 0 to 1024 [ 40.959946][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.984552][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.986033][ T3477] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6: Failed to acquire dquot type 0 [ 40.993665][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.014957][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.023743][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.032598][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.041394][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.043526][ T3477] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.066909][ T3477] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.6: corrupted inode contents [ 41.067935][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.087682][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.096558][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.101784][ T3477] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.6: mark_inode_dirty error [ 41.105477][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.125450][ T3477] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.6: corrupted inode contents [ 41.138575][ T3477] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.6: mark_inode_dirty error [ 41.177192][ T3477] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.6: corrupted inode contents [ 41.200557][ T3477] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 41.213866][ T3477] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.6: corrupted inode contents [ 41.276626][ T3477] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.6: mark_inode_dirty error [ 41.303679][ T3477] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 41.316011][ T3491] tipc: Failed to remove unknown binding: 66,1,1/0:1238013207/1238013209 [ 41.324578][ T3491] tipc: Failed to remove unknown binding: 66,1,1/0:1238013207/1238013209 [ 41.353485][ T3477] EXT4-fs (loop0): 1 truncate cleaned up [ 41.359553][ T3477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.443489][ T3503] loop3: detected capacity change from 0 to 128 [ 41.493917][ T3477] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.514957][ T3503] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.528926][ T3503] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.591802][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.642526][ T3517] netlink: 51 bytes leftover after parsing attributes in process `syz.3.17'. [ 41.643837][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.827436][ T3535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.885658][ T3543] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 41.885658][ T3543] program syz.0.24 not setting count and/or reply_len properly [ 41.912381][ T3547] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 41.912684][ T3546] IPVS: stopping master sync thread 3547 ... [ 42.051608][ T3554] loop4: detected capacity change from 0 to 2048 [ 42.075318][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.282634][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.309273][ T3575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 42.320895][ T3578] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 42.357403][ T3580] loop9: detected capacity change from 0 to 7 [ 42.365239][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.374869][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.382817][ T3299] loop9: unable to read partition table [ 42.389103][ T3580] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.397826][ T3580] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.405882][ T3580] loop9: unable to read partition table [ 42.412745][ T3580] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 42.412745][ T3580] ) failed (rc=-5) [ 42.413806][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.434717][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.442769][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.450970][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.459780][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.554074][ T3586] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 42.607291][ T3597] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 42.625179][ T3599] loop3: detected capacity change from 0 to 512 [ 42.636312][ T3599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 42.654616][ T3535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.655575][ T3599] System zones: 1-12 [ 42.670700][ T3599] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.47: error while reading EA inode 32 err=-116 [ 42.684708][ T3599] EXT4-fs (loop3): Remounting filesystem read-only [ 42.691268][ T3599] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.704693][ T3599] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.710965][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.715206][ T3599] EXT4-fs (loop3): 1 orphan inode deleted [ 42.729666][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.767047][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.775895][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.799536][ T3608] loop3: detected capacity change from 0 to 512 [ 42.837212][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.857599][ T3608] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.884718][ T3610] loop2: detected capacity change from 0 to 8192 [ 42.893114][ T3608] EXT4-fs (loop3): shut down requested (2) [ 42.902379][ T3615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 42.923203][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.025686][ T3626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.157916][ T3642] loop2: detected capacity change from 0 to 512 [ 43.165886][ T3642] ======================================================= [ 43.165886][ T3642] WARNING: The mand mount option has been deprecated and [ 43.165886][ T3642] and is ignored by this kernel. Remove the mand [ 43.165886][ T3642] option from the mount to silence this warning. [ 43.165886][ T3642] ======================================================= [ 43.245212][ T3646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 43.255174][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.273051][ T3642] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.330243][ T3654] loop3: detected capacity change from 0 to 512 [ 43.337748][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.63: corrupted inode contents [ 43.359925][ T3654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c11d, mo2=0002] [ 43.387189][ T3642] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.63: mark_inode_dirty error [ 43.399222][ T3654] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.67: corrupted in-inode xattr: e_value size too large [ 43.414971][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.63: corrupted inode contents [ 43.427008][ T3654] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.67: couldn't read orphan inode 15 (err -117) [ 43.440649][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.441248][ T3642] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.63: mark_inode_dirty error [ 43.499522][ T3535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.510900][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.530022][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.575316][ T3535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.652736][ T3535] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.657814][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.668784][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.676552][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.682101][ T3535] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.684329][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.700325][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.708579][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.713002][ T3535] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.716385][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.732347][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.740119][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.747833][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.755561][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.763553][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.771242][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.779084][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.787019][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.794771][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.802490][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.806005][ T3535] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.810160][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.810190][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.833992][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.841755][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.849435][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.857146][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.865646][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.873370][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.874784][ T3535] syz.1.22 (3535) used greatest stack depth: 10872 bytes left [ 43.881026][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.896274][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.903990][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.911692][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.919358][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.927272][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.935074][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.946836][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.018686][ T3674] fido_id[3674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.083758][ T3677] loop2: detected capacity change from 0 to 512 [ 44.112107][ T3677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.125441][ T3677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.167442][ T3677] EXT4-fs (loop2): 1 truncate cleaned up [ 44.183813][ T3677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.335816][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.370649][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 44.387448][ T3701] Zero length message leads to an empty skb [ 44.450570][ T3698] syz.4.85 (3698) used greatest stack depth: 10192 bytes left [ 44.497162][ T3709] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 44.551929][ T3711] vhci_hcd: invalid port number 96 [ 44.557186][ T3711] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 44.623424][ T3721] netlink: 64 bytes leftover after parsing attributes in process `syz.2.94'. [ 44.657408][ T3723] loop4: detected capacity change from 0 to 512 [ 44.714332][ T3723] EXT4-fs (loop4): too many log groups per flexible block group [ 44.722222][ T3723] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 44.740676][ T3723] EXT4-fs (loop4): mount failed [ 44.849104][ T3745] sd 0:0:1:0: device reset [ 44.873021][ T3748] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.883730][ T3750] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 45.024086][ T3762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.113'. [ 45.069211][ T3766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.114'. [ 45.392148][ T3800] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 45.498302][ T3811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 45.507269][ T3811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 45.566776][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.574616][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.582215][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.589719][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.597230][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.604694][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.612230][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.619655][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.627353][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.635073][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.642605][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.650074][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.658338][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.665815][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.673270][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.680702][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.688160][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.696123][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.704023][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.711912][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.712959][ T3825] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 45.719390][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.734245][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.741691][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.749101][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.756559][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.764091][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.772072][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 45.805794][ T3828] fido_id[3828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.814066][ T3827] syzkaller0: tun_chr_ioctl cmd 35108 [ 45.830224][ T3830] loop4: detected capacity change from 0 to 2048 [ 45.837339][ T3830] EXT4-fs: Ignoring removed bh option [ 45.863336][ T3830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.932707][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 45.932768][ T29] audit: type=1400 audit(1752101283.882:268): avc: denied { ioctl } for pid=3831 comm="syz.1.143" path="socket:[4084]" dev="sockfs" ino=4084 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.996705][ T29] audit: type=1400 audit(1752101283.942:269): avc: denied { create } for pid=3842 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.998743][ T3843] unsupported nla_type 52263 [ 46.031441][ T29] audit: type=1400 audit(1752101283.942:270): avc: denied { write } for pid=3842 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.051485][ T29] audit: type=1400 audit(1752101283.942:271): avc: denied { nlmsg_write } for pid=3842 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.173257][ T29] audit: type=1326 audit(1752101284.092:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.196935][ T29] audit: type=1326 audit(1752101284.092:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.220522][ T29] audit: type=1326 audit(1752101284.102:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.226388][ T3853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.243844][ T29] audit: type=1326 audit(1752101284.102:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.279058][ T29] audit: type=1326 audit(1752101284.102:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.302487][ T29] audit: type=1326 audit(1752101284.102:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eb8e929 code=0x7ffc0000 [ 46.619954][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.635713][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.648138][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.648138][ T31] [ 46.657894][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 46.664071][ T31] EXT4-fs (loop4): Free/Dirty block details [ 46.670013][ T31] EXT4-fs (loop4): free_blocks=2415919104 [ 46.675900][ T31] EXT4-fs (loop4): dirty_blocks=8224 [ 46.681302][ T31] EXT4-fs (loop4): Block reservation details [ 46.687410][ T31] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 46.693961][ T3872] __nla_validate_parse: 1 callbacks suppressed [ 46.693974][ T3872] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.156'. [ 46.709854][ T3867] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.156'. [ 46.727170][ T1738] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 46.782433][ T3877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.160'. [ 46.802933][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 46.811986][ T3877] netlink: 204 bytes leftover after parsing attributes in process `syz.2.160'. [ 46.820968][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 46.986566][ T3895] loop3: detected capacity change from 0 to 1024 [ 47.010348][ T3897] loop2: detected capacity change from 0 to 2048 [ 47.013458][ T3895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.042161][ T3895] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 47.058330][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.090425][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.580965][ T3915] loop1: detected capacity change from 0 to 4096 [ 47.594470][ T3915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.659228][ T3919] loop9: detected capacity change from 0 to 7 [ 47.667287][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.679110][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.686986][ T3297] loop9: unable to read partition table [ 47.704383][ T3919] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.710647][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.712818][ T3919] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.729314][ T3919] loop9: unable to read partition table [ 47.735179][ T3919] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 47.735179][ T3919] U) failed (rc=-5) [ 47.764327][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.774008][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.781922][ T3297] loop9: unable to read partition table [ 47.789007][ T3920] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.797391][ T3920] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.805312][ T3920] loop9: unable to read partition table [ 47.811060][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.811891][ T3920] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 47.811891][ T3920] U) failed (rc=-5) [ 47.819177][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.922235][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.972346][ T3925] vhci_hcd: invalid port number 146 [ 47.977627][ T3925] vhci_hcd: default hub control req: 6017 v0005 i0092 l0 [ 48.009628][ T3930] 9pnet: p9_errstr2errno: server reported unknown error @L % [ 48.134163][ T3942] : renamed from pim6reg1 [ 48.220560][ T3949] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 48.231088][ T3949] batman_adv: batadv0: Adding interface: team0 [ 48.237430][ T3949] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.262698][ T3949] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 48.643266][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.652221][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.661317][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.673042][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.681990][ T3995] netlink: 'syz.2.204': attribute type 6 has an invalid length. [ 48.893343][ T4019] syzkaller1: entered promiscuous mode [ 48.898963][ T4019] syzkaller1: entered allmulticast mode [ 48.947308][ T4026] bond1: entered promiscuous mode [ 48.952731][ T4026] bond1: entered allmulticast mode [ 48.958335][ T4026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.972991][ T4026] bond1 (unregistering): Released all slaves [ 49.068862][ T4034] syzkaller1: entered promiscuous mode [ 49.074438][ T4034] syzkaller1: entered allmulticast mode [ 49.153230][ T4038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.318123][ T4048] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.430087][ T4052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=4052 comm=syz.4.231 [ 49.484005][ T4056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.524263][ T4056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.574382][ T4056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.635624][ T4056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.705341][ T4066] hub 9-0:1.0: USB hub found [ 49.709949][ T4056] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.710387][ T4066] hub 9-0:1.0: 8 ports detected [ 49.738493][ T4056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.754688][ T4070] loop2: detected capacity change from 0 to 128 [ 49.755676][ T4056] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.774201][ T4056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.784882][ T4070] EXT4-fs: Ignoring removed nobh option [ 49.818063][ T4070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.847006][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.852836][ T4070] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.869421][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.887241][ T4079] loop4: detected capacity change from 0 to 1024 [ 49.916196][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.928329][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.962402][ T4085] loop1: detected capacity change from 0 to 512 [ 49.980697][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.990938][ T4090] loop2: detected capacity change from 0 to 128 [ 50.016944][ T4085] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.246: bad orphan inode 13 [ 50.059302][ T4085] ext4_test_bit(bit=12, block=4) = 1 [ 50.064701][ T4085] is_bad_inode(inode)=0 [ 50.068945][ T4085] NEXT_ORPHAN(inode)=0 [ 50.073202][ T4085] max_ino=32 [ 50.076419][ T4085] i_nlink=1 [ 50.081073][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.134984][ T4085] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.246: Unrecognised inode hash code 20 [ 50.146498][ T4085] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.246: Corrupt directory, running e2fsck is recommended [ 50.178175][ T4085] EXT4-fs error (device loop1): ext4_lookup:1787: inode #16: comm syz.1.246: iget: bad i_size value: 880468304680 [ 50.199916][ T4102] tipc: Started in network mode [ 50.204938][ T4102] tipc: Node identity ac14140f, cluster identity 4711 [ 50.219530][ T4085] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.246: Unrecognised inode hash code 20 [ 50.230929][ T4085] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.246: Corrupt directory, running e2fsck is recommended [ 50.243916][ T4102] tipc: New replicast peer: 255.255.255.255 [ 50.250063][ T4102] tipc: Enabled bearer , priority 10 [ 50.258405][ T4085] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.246: Unrecognised inode hash code 20 [ 50.269893][ T4085] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.246: Corrupt directory, running e2fsck is recommended [ 50.288301][ T4085] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.246: corrupted in-inode xattr: e_value out of bounds [ 50.332328][ T4085] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.246: Unrecognised inode hash code 20 [ 50.345039][ T4085] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.246: Corrupt directory, running e2fsck is recommended [ 50.368552][ T4085] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.246: corrupted in-inode xattr: e_value out of bounds [ 50.383886][ T4085] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.246: Unrecognised inode hash code 20 [ 50.395530][ T4085] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.246: Corrupt directory, running e2fsck is recommended [ 50.431543][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.540984][ T4125] loop3: detected capacity change from 0 to 512 [ 50.580755][ T4125] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.599716][ T4125] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.620186][ T4125] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 50.641183][ T4125] EXT4-fs (loop3): Remounting filesystem read-only [ 50.665540][ T4125] EXT4-fs (loop3): 1 truncate cleaned up [ 50.671837][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.682665][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.707490][ T4134] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 50.715356][ T4134] netlink: 'syz.0.265': attribute type 4 has an invalid length. [ 50.724780][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.735615][ T4125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.791505][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.861318][ T4142] loop0: detected capacity change from 0 to 512 [ 50.871184][ T4142] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.269: bad orphan inode 13 [ 50.885560][ T4142] ext4_test_bit(bit=12, block=4) = 1 [ 50.890999][ T4142] is_bad_inode(inode)=0 [ 50.895387][ T4142] NEXT_ORPHAN(inode)=0 [ 50.899564][ T4142] max_ino=32 [ 50.902869][ T4142] i_nlink=1 [ 50.914006][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.936305][ T4142] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.269: Unrecognised inode hash code 20 [ 50.947882][ T4142] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 50.961060][ T4142] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.269: iget: bad i_size value: 880468304680 [ 50.974691][ T4142] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.269: Unrecognised inode hash code 20 [ 50.986420][ T4142] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 51.000461][ T4142] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.269: Unrecognised inode hash code 20 [ 51.011940][ T4142] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 51.026308][ T4142] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.269: corrupted in-inode xattr: e_value out of bounds [ 51.041272][ T4142] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.269: Unrecognised inode hash code 20 [ 51.052696][ T4142] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 51.066928][ T4142] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.269: corrupted in-inode xattr: e_value out of bounds [ 51.081938][ T4142] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.269: Unrecognised inode hash code 20 [ 51.093367][ T4142] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 51.118694][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.131457][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 51.131473][ T29] audit: type=1400 audit(1752101289.072:372): avc: denied { name_bind } for pid=4144 comm="syz.3.271" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 51.173945][ T4147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.197801][ T4147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.273990][ T29] audit: type=1400 audit(1752101289.222:373): avc: denied { map } for pid=4152 comm="syz.3.274" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.314971][ T29] audit: type=1400 audit(1752101289.262:374): avc: denied { read } for pid=4162 comm="syz.4.279" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.338913][ T29] audit: type=1400 audit(1752101289.262:375): avc: denied { open } for pid=4162 comm="syz.4.279" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.349081][ T4165] loop3: detected capacity change from 0 to 1024 [ 51.370147][ T4165] EXT4-fs: Ignoring removed oldalloc option [ 51.376186][ T4165] EXT4-fs: Ignoring removed bh option [ 51.383077][ T29] audit: type=1400 audit(1752101289.312:376): avc: denied { write } for pid=4162 comm="syz.4.279" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.385571][ T10] tipc: Node number set to 2886997007 [ 51.447000][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.549411][ T29] audit: type=1400 audit(1752101289.492:377): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.572438][ T29] audit: type=1400 audit(1752101289.492:378): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.646816][ T29] audit: type=1400 audit(1752101289.492:379): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.795912][ T4198] __nla_validate_parse: 3 callbacks suppressed [ 51.795970][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 51.811433][ T29] audit: type=1400 audit(1752101289.732:380): avc: denied { mount } for pid=4195 comm="syz.4.295" name="/" dev="ramfs" ino=6625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.866083][ T4200] loop4: detected capacity change from 0 to 512 [ 51.871736][ T4173] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.890165][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.901679][ T4200] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.915302][ T4200] EXT4-fs (loop4): 1 truncate cleaned up [ 51.923624][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.954952][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.971221][ T29] audit: type=1400 audit(1752101289.912:381): avc: denied { execmem } for pid=4202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.993738][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.015388][ T4204] mmap: syz.1.299 (4204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.054911][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.135847][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.251553][ T37] bridge_slave_1: left allmulticast mode [ 52.257324][ T37] bridge_slave_1: left promiscuous mode [ 52.263524][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.310526][ T37] bridge_slave_0: left allmulticast mode [ 52.316410][ T37] bridge_slave_0: left promiscuous mode [ 52.322185][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.360223][ T4237] SELinux: syz.4.309 (4237) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.545163][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.556388][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.573320][ T37] bond0 (unregistering): Released all slaves [ 52.592579][ T4251] loop1: detected capacity change from 0 to 512 [ 52.635007][ T37] hsr_slave_0: left promiscuous mode [ 52.657967][ T4254] loop0: detected capacity change from 0 to 2048 [ 52.664733][ T37] hsr_slave_1: left promiscuous mode [ 52.670457][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.678219][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.694804][ T4254] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.704094][ T4251] EXT4-fs (loop1): too many log groups per flexible block group [ 52.711898][ T4251] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 52.719442][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.726950][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.749415][ T4254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.751561][ T4251] EXT4-fs (loop1): mount failed [ 52.781684][ T37] veth1_macvtap: left promiscuous mode [ 52.788211][ T37] veth0_macvtap: left promiscuous mode [ 52.819133][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.836611][ T37] veth1_vlan: left promiscuous mode [ 52.848675][ T37] veth0_vlan: left promiscuous mode [ 52.924132][ T4282] SELinux: ebitmap: truncated map [ 52.929996][ T4282] SELinux: failed to load policy [ 52.939536][ T4286] loop0: detected capacity change from 0 to 2048 [ 52.988048][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.031561][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 53.109086][ T37] team0 (unregistering): Port device team_slave_1 removed [ 53.140359][ T37] team0 (unregistering): Port device team_slave_0 removed [ 53.205322][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.215348][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.234913][ T4310] netlink: 'syz.2.333': attribute type 13 has an invalid length. [ 53.289127][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.296557][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.385712][ T4319] process 'syz.1.337' launched './file1' with NULL argv: empty string added [ 53.387696][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.404695][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.424656][ T4321] loop1: detected capacity change from 0 to 512 [ 53.444450][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.457489][ T4321] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.480619][ T4310] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.489934][ T4310] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.498972][ T4310] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.508238][ T4310] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.550696][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.592640][ T4211] chnl_net:caif_netlink_parms(): no params data found [ 53.668222][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.675482][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.688669][ T4211] bridge_slave_0: entered allmulticast mode [ 53.695416][ T4211] bridge_slave_0: entered promiscuous mode [ 53.702644][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.709799][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.717212][ T4211] bridge_slave_1: entered allmulticast mode [ 53.724249][ T4211] bridge_slave_1: entered promiscuous mode [ 53.737213][ T4347] loop1: detected capacity change from 0 to 512 [ 53.755127][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.776665][ T4347] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 53.786445][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.805317][ T4347] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.341: invalid indirect mapped block 2683928664 (level 1) [ 53.820561][ T4353] loop2: detected capacity change from 0 to 512 [ 53.829132][ T4347] EXT4-fs (loop1): Remounting filesystem read-only [ 53.837141][ T4347] EXT4-fs (loop1): 1 truncate cleaned up [ 53.855747][ T4347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.882967][ T4211] team0: Port device team_slave_0 added [ 53.896917][ T4353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.897419][ T4211] team0: Port device team_slave_1 added [ 53.948616][ T4353] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.970064][ T4353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.994542][ T4353] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 54.007119][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.014159][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.040152][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.054904][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.079771][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.086917][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.113082][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.137053][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.208024][ T4211] hsr_slave_0: entered promiscuous mode [ 54.212268][ T4374] loop0: detected capacity change from 0 to 2048 [ 54.214618][ T4211] hsr_slave_1: entered promiscuous mode [ 54.246057][ T4211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.257001][ T4211] Cannot create hsr debugfs directory [ 54.258044][ T4374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.347694][ T4374] EXT4-fs (loop0): shut down requested (0) [ 54.402119][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.417841][ T4211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.459692][ T4211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.487525][ T4211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.507717][ T4211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.664748][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.689999][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.700725][ T2638] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.707936][ T2638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.721234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.728376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.845141][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.989893][ T4487] tipc: Started in network mode [ 54.994887][ T4487] tipc: Node identity , cluster identity 4711 [ 55.001071][ T4487] tipc: Failed to set node id, please configure manually [ 55.008221][ T4487] tipc: Enabling of bearer rejected, failed to enable media [ 55.161976][ T4211] veth0_vlan: entered promiscuous mode [ 55.191663][ T4211] veth1_vlan: entered promiscuous mode [ 55.212013][ T4211] veth0_macvtap: entered promiscuous mode [ 55.224329][ T4211] veth1_macvtap: entered promiscuous mode [ 55.251385][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.271971][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.296360][ T4211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.305237][ T4211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.314103][ T4211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.322863][ T4211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.341193][ T4522] loop2: detected capacity change from 0 to 512 [ 55.363054][ T4527] netlink: 128 bytes leftover after parsing attributes in process `syz.0.374'. [ 55.391151][ T4522] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 55.445780][ T4522] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.373: invalid indirect mapped block 2683928664 (level 1) [ 55.500772][ T4522] EXT4-fs (loop2): Remounting filesystem read-only [ 55.560081][ T4522] EXT4-fs (loop2): 1 truncate cleaned up [ 55.596192][ T4522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.638393][ T4554] loop5: detected capacity change from 0 to 2048 [ 55.671972][ T1738] ================================================================== [ 55.680103][ T1738] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 55.687420][ T1738] [ 55.689854][ T1738] read to 0xffff88811970ec88 of 4 bytes by task 51 on cpu 0: [ 55.697246][ T1738] atime_needs_update+0x25f/0x3e0 [ 55.702292][ T1738] touch_atime+0x4a/0x340 [ 55.706638][ T1738] shmem_file_read_iter+0x477/0x540 [ 55.711851][ T1738] lo_rw_aio+0x6ea/0x7a0 [ 55.716113][ T1738] loop_process_work+0x52d/0xa60 [ 55.721073][ T1738] loop_workfn+0x31/0x40 [ 55.725335][ T1738] process_scheduled_works+0x4cb/0x9d0 [ 55.730822][ T1738] worker_thread+0x582/0x770 [ 55.735433][ T1738] kthread+0x489/0x510 [ 55.739515][ T1738] ret_from_fork+0xda/0x150 [ 55.744034][ T1738] ret_from_fork_asm+0x1a/0x30 [ 55.748813][ T1738] [ 55.751143][ T1738] write to 0xffff88811970ec88 of 4 bytes by task 1738 on cpu 1: [ 55.758784][ T1738] touch_atime+0x1e8/0x340 [ 55.763219][ T1738] shmem_file_read_iter+0x477/0x540 [ 55.768429][ T1738] lo_rw_aio+0x6ea/0x7a0 [ 55.772696][ T1738] loop_process_work+0x52d/0xa60 [ 55.777659][ T1738] loop_rootcg_workfn+0x22/0x30 [ 55.782531][ T1738] process_scheduled_works+0x4cb/0x9d0 [ 55.788033][ T1738] worker_thread+0x582/0x770 [ 55.792645][ T1738] kthread+0x489/0x510 [ 55.796726][ T1738] ret_from_fork+0xda/0x150 [ 55.801251][ T1738] ret_from_fork_asm+0x1a/0x30 [ 55.806123][ T1738] [ 55.808455][ T1738] value changed: 0x262d177c -> 0x26d5949a [ 55.814198][ T1738] [ 55.816526][ T1738] Reported by Kernel Concurrency Sanitizer on: [ 55.822689][ T1738] CPU: 1 UID: 0 PID: 1738 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.835287][ T1738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.845446][ T1738] Workqueue: loop5 loop_rootcg_workfn [ 55.850853][ T1738] ================================================================== [ 55.940947][ T4554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.013579][ T4554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.037142][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.116342][ T1738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.223943][ T1738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.294568][ T1738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.408627][ T1738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.531366][ T1738] bridge_slave_1: left allmulticast mode [ 56.537064][ T1738] bridge_slave_1: left promiscuous mode [ 56.542890][ T1738] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.550921][ T1738] bridge_slave_0: left allmulticast mode [ 56.556709][ T1738] bridge_slave_0: left promiscuous mode [ 56.562541][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.643758][ T1738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.653607][ T1738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.663161][ T1738] bond0 (unregistering): Released all slaves [ 56.718747][ T1738] tipc: Disabling bearer [ 56.724056][ T1738] tipc: Left network mode [ 56.731225][ T1738] hsr_slave_0: left promiscuous mode [ 56.737154][ T1738] hsr_slave_1: left promiscuous mode [ 56.742768][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.750245][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.758247][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.765852][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.776661][ T1738] veth1_macvtap: left promiscuous mode [ 56.782170][ T1738] veth0_macvtap: left promiscuous mode [ 56.788186][ T1738] veth1_vlan: left promiscuous mode [ 56.793687][ T1738] veth0_vlan: left promiscuous mode [ 56.855766][ T1738] team0 (unregistering): Port device team_slave_1 removed [ 56.865676][ T1738] team0 (unregistering): Port device team_slave_0 removed [ 57.375763][ T1738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.428491][ T1738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.465984][ T1738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.513808][ T1738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.580420][ T1738] bridge_slave_1: left allmulticast mode [ 57.586103][ T1738] bridge_slave_1: left promiscuous mode [ 57.591893][ T1738] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.599537][ T1738] bridge_slave_0: left allmulticast mode [ 57.605182][ T1738] bridge_slave_0: left promiscuous mode [ 57.610938][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.619075][ T1738] bridge_slave_1: left allmulticast mode [ 57.624825][ T1738] bridge_slave_1: left promiscuous mode [ 57.630645][ T1738] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.638398][ T1738] bridge_slave_0: left allmulticast mode [ 57.644106][ T1738] bridge_slave_0: left promiscuous mode [ 57.649767][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.740572][ T1738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.749836][ T1738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.759006][ T1738] bond0 (unregistering): Released all slaves [ 57.807210][ T1738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.817210][ T1738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.826716][ T1738] bond0 (unregistering): Released all slaves [ 57.874768][ T1738] IPVS: stopping backup sync thread 3578 ... [ 57.884603][ T1738] hsr_slave_0: left promiscuous mode [ 57.891835][ T1738] hsr_slave_1: left promiscuous mode [ 57.897499][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.905317][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.916245][ T1738] hsr_slave_0: left promiscuous mode [ 57.922583][ T1738] hsr_slave_1: left promiscuous mode [ 57.929176][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.936612][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.944517][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.952102][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.964285][ T1738] veth1_macvtap: left promiscuous mode [ 57.969843][ T1738] veth0_macvtap: left promiscuous mode [ 57.975651][ T1738] veth1_vlan: left promiscuous mode [ 57.980915][ T1738] veth0_vlan: left promiscuous mode [ 58.043888][ T1738] team0 (unregistering): Port device team_slave_1 removed [ 58.053353][ T1738] team0 (unregistering): Port device team_slave_0 removed [ 58.108231][ T1738] team0 (unregistering): Port device team_slave_1 removed [ 58.117955][ T1738] team0 (unregistering): Port device team_slave_0 removed [ 58.574674][ T1738] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.611914][ T1738] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.668317][ T1738] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.716312][ T1738] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.783165][ T1738] bridge_slave_1: left allmulticast mode [ 58.789028][ T1738] bridge_slave_1: left promiscuous mode [ 58.794883][ T1738] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.804401][ T1738] bridge_slave_0: left allmulticast mode [ 58.810153][ T1738] bridge_slave_0: left promiscuous mode [ 58.815877][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.904692][ T1738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.914561][ T1738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.924390][ T1738] bond0 (unregistering): Released all slaves [ 58.962171][ T1738] hsr_slave_0: left promiscuous mode [ 58.967958][ T1738] hsr_slave_1: left promiscuous mode [ 58.974053][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.981526][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.989688][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.997203][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.008612][ T1738] veth1_macvtap: left promiscuous mode [ 59.014141][ T1738] veth0_macvtap: left promiscuous mode [ 59.019969][ T1738] veth1_vlan: left promiscuous mode [ 59.025530][ T1738] veth0_vlan: left promiscuous mode [ 59.094236][ T1738] team0 (unregistering): Port device team_slave_1 removed [ 59.103752][ T1738] team0 (unregistering): Port device team_slave_0 removed