last executing test programs: 9.835152549s ago: executing program 2 (id=214): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x15, 0x0, 0x9, &(0x7f0000000580), 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x8405}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 9.49411288s ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 9.479776391s ago: executing program 2 (id=219): r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x7, &(0x7f00000006c0)) fcntl$lock(r1, 0x25, &(0x7f0000000180)) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_complete(r3) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 8.579435794s ago: executing program 2 (id=227): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x15, 0x0, 0x9, &(0x7f0000000580), 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x8405}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.053374212s ago: executing program 2 (id=231): syz_open_dev$vcsn(0x0, 0x9, 0x4000) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") ftruncate(0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setrlimit(0xf, &(0x7f0000000000)={0x3, 0x10000}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x2f]}) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 7.813108884s ago: executing program 2 (id=234): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[], 0x1, 0x2a6, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0xffffff6f}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x4, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) r6 = getuid() statx(r0, &(0x7f0000000100)='./file0\x00', 0x100, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r7) fallocate(r0, 0x0, 0x12000000, 0x2c2) clock_getres(0x6, &(0x7f0000000540)) 4.440804913s ago: executing program 4 (id=273): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r7) 4.237527161s ago: executing program 4 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x14, r5, 0x1}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4.155454928s ago: executing program 4 (id=279): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) request_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='lp\x00', 0x3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001840)="bf703a6c13939be81f65e275dbe664372b91434051edb3d15b10c70c06c2ff5ec08b55d2430000000000000009ab0a94fb45c75c0000000078da4ff64573cdcfa5c89a9f90d9d5e762ceadb9b6271f061596933a49db66eb67bf7f86ff4d488cf852e45aee203fd5bd43825c6768d367452300000000000000000081a63d78a10fd3131abfcca28842aa3980147695d04d55bf2917ffc202a1bab75cb76e87f334769c02e19c0b3dcd610d63b1a0819064e4b21158616f016b30939ae26ad3ffc2c25a01f5a467f17119db71ef", 0xbf}, {&(0x7f00000005c0)="37f2bdcc9e0625d7a01a4051db3f3f6d564950b1b206378955909737a844f4fac42eb1e93ec434bdd265fd3adb089135b4e19e8d231ba5a0dca7f9a36b1ec6efd8078727ab4a7d9023e27003ba26b105338290e43c3019b723bb8d7723f114fdac5b0b5427e941514cf49e4d4a9d4bec00a91920ac4776c55af6cd2b7b7c24ec931f3f065d89bac5661c5b4f8ed1ecec14858147088325febcc79263ba9a", 0xf5a21d55}, {&(0x7f0000001940)="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"}, {&(0x7f0000000180)="82fa884ae7a4ee731ca921f5c840c47bf365dd5e9e7e8f72301c92e9468875647c2f4e914a7fc02c22321ffbf3165fb527413a"}, {&(0x7f0000000680)="d6b546d97de044c1185d8e5dd013741170abb12be7f5a49d0f519a5cec6e65a57a3d6e82465c550a7049c8f693bc7ccfa3ad7e0d1f8dd25ff56a4dabbde46cfbdb0c77b217a12dad4e69f6ca459b838feef921a1c222991df39cf9ecbf07e6bab287d17e7c1a649d169e6e01e5b7e6c0a8ad69f8fcd8b329a7b4ddc4ebbd4cc5bdd8d77e88486af85364abf51cd81653ec4c6dfb48984aeeebbb6c76bc4b03a56e677d023b57055b48d8ffef89dac042d21dc0e26890"}], 0x2}, 0x2c805) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 4.008640902s ago: executing program 3 (id=280): syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000001c0)=""/126, &(0x7f0000000280)=0x7e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_io_uring_setup(0xc73, &(0x7f0000000140)={0x0, 0x7e1c, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 3.1596495s ago: executing program 3 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x15d) close(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x200) sendfile(r3, r4, 0x0, 0xe065) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2.994937155s ago: executing program 3 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x2e) sendmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0xfffffffa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b000000954e58c0e519300eeae03288543d981294ccaa651c9d14ced3e7374ce3772304970580125360f56925116474c218d3c952666499c787ea35d83f0f295550400d02a41e3a53ff9767cb2980910eabcd0bb438bfa66ec92be89963f3cc3f35d2d6a765353e3e1361fcdfdd44148da99b0daa6be0592d88043e3ccf15ff638cfb917d3d7294d287005c2934d857824e53c5e68f3df1f5b4fd0302fa3bca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getresgid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000680)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)) fcntl$setown(r4, 0x8, r1) 2.916665882s ago: executing program 0 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r1}, 0x18) 2.864751907s ago: executing program 3 (id=287): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000002080000000800000000c00000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigtimedwait(&(0x7f0000000280)={[0x5]}, &(0x7f0000000340), &(0x7f00000002c0), 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.743867328s ago: executing program 0 (id=288): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(0x0, 0x101002, 0x121) ioperm(0x0, 0x7, 0x1) fspick(0xffffffffffffffff, 0x0, 0x1) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 2.569515844s ago: executing program 3 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4, 0x0, @remote, 0x9}, 0x1c) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.549644396s ago: executing program 0 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 2.50190944s ago: executing program 3 (id=295): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) 2.411832698s ago: executing program 0 (id=297): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x44, &(0x7f00000012c0)=""/68, 0x41000, 0x16, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x1, 0x6, 0x2, 0x4}, 0x10, 0x13e2f, r0, 0x0, &(0x7f00000014c0)=[r1, 0xffffffffffffffff], &(0x7f0000001500), 0x10, 0xa, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff00000e0771a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61146c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.047003392s ago: executing program 0 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 1.63030918s ago: executing program 1 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r1}, 0x18) 1.568276316s ago: executing program 1 (id=301): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) write$binfmt_script(r0, &(0x7f0000000080), 0xffffff85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6611) 1.170186393s ago: executing program 0 (id=302): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) listen(r1, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet(r3, &(0x7f0000002ac0), 0x400000000000261, 0x85) close_range(r0, 0xffffffffffffffff, 0x0) 1.169678653s ago: executing program 1 (id=303): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobarrier}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x5, 0x0, 0x1a}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000030c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000280)={0x0, 0x2, 0xd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 929.132675ms ago: executing program 1 (id=304): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000002080000000800000000c00000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigtimedwait(&(0x7f0000000280)={[0x5]}, &(0x7f0000000340), &(0x7f00000002c0), 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 928.787995ms ago: executing program 4 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4, 0x0, @remote, 0x9}, 0x1c) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 850.830983ms ago: executing program 4 (id=306): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x802}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x7, [@link_local, @dev, @broadcast, @remote, @link_local, @multicast, @broadcast]}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='netlink_extack\x00', r2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000003c0)=0xfffffff6, 0x0, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) dup3(r4, r3, 0x0) faccessat(r3, &(0x7f0000000280)='./file0\x00', 0x85) 849.764832ms ago: executing program 1 (id=307): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7b0, 0x0, 0x0, 0x0, 0x6}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x0, 0x5, 0x4, 0x80, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xe9, &(0x7f00000004c0)=""/233, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x9, 0xccf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r3, r4, r3, r4], &(0x7f0000000b80)=[{0x1, 0x2, 0x1, 0xa}, {0x4, 0x4, 0x4, 0x6}], 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r5, 0x0, 0x72, 0xb8, &(0x7f0000000c80)="d01d10f9c9d468697ca446f7add4c9d1498e34ab41d9a3cfd324b6bc371c3afe53308a70284180c54ec2ce23f3420743eefcddf31668c03016d340d9fe241137c666fbc7708c5a914f1ec90dd595e2181a3a82774e565ab1accadbdaa5f0059a7041bf10645058ef0d8f9c1b09843ba623ba", &(0x7f0000000d00)=""/184, 0x9, 0x0, 0x34, 0xa6, &(0x7f0000000dc0)="4994dd0980182e1392c71dfa61f7418251357703a64e3b4ff9b0b10fba20a8276b3e72a1154072c04a67e8abe9399f3a6d3f2622", &(0x7f0000000e00)="1f91096e4c73b18fe6acd774c3c1fd7ff9e71ce7ebb81cf75bd40e6d33d14da9be524fc6191e4595e16fc9af0b8e6c542f945969b549799e5a01040b4d0489b605be87b7c62c4a66400fe00e697019df52f5800142c90957910d09b01cab016a084fb04f801da8d4edd11ff165c5d98c3c61c6264bf718246300854a614fcf805e411e09843dfb41ea5b4219f55b0c2617319825e7c4aeef3637b1109026e20c275e105409f8", 0x3, 0x0, 0xe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) syz_emit_ethernet(0x32, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) 684.59µs ago: executing program 4 (id=308): mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x7, 0x20, 0x2000000}, 0x2f) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500"], 0x0) 0s ago: executing program 1 (id=309): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x15, 0x0, 0x9, &(0x7f0000000580), 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x8405}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): 3277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.671612][ T3277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.693284][ T3265] team0: Port device team_slave_1 added [ 28.708312][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.715333][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.741281][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.763602][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.770614][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.796659][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.825004][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.832023][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.857989][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.870991][ T3268] hsr_slave_0: entered promiscuous mode [ 28.877175][ T3268] hsr_slave_1: entered promiscuous mode [ 28.883055][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.890925][ T3268] Cannot create hsr debugfs directory [ 28.905173][ T3277] hsr_slave_0: entered promiscuous mode [ 28.911091][ T3277] hsr_slave_1: entered promiscuous mode [ 28.917055][ T3277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.924595][ T3277] Cannot create hsr debugfs directory [ 28.931075][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.938082][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.964016][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.997249][ T3271] hsr_slave_0: entered promiscuous mode [ 29.003254][ T3271] hsr_slave_1: entered promiscuous mode [ 29.009241][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.016852][ T3271] Cannot create hsr debugfs directory [ 29.061783][ T3265] hsr_slave_0: entered promiscuous mode [ 29.068021][ T3265] hsr_slave_1: entered promiscuous mode [ 29.074324][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.081913][ T3265] Cannot create hsr debugfs directory [ 29.182674][ T3264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.191752][ T3264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.216380][ T3264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.233802][ T3264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.258537][ T3268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.267146][ T3268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.275700][ T3268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.284547][ T3268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.307030][ T3277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.315671][ T3277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.324413][ T3277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.333126][ T3277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.369351][ T3271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.379428][ T3271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.388679][ T3271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.397069][ T3271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.429977][ T3265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.445492][ T3265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.453945][ T3265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.464159][ T3265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.501432][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.516912][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.525495][ T3277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.553956][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.567848][ T3277] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.582195][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.589493][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.597956][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.605075][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.623281][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.630323][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.639086][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.646118][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.656342][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.666059][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.681123][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.690031][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.697098][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.710410][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.717690][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.730363][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.741596][ T3264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.752003][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.765786][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.783836][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.790966][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.810081][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.817224][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.835340][ T3277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.862671][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.869770][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.880434][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.909312][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.916408][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.964151][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.986177][ T3277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.009175][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.019404][ T3271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.058767][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.147341][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.199641][ T3277] veth0_vlan: entered promiscuous mode [ 30.218084][ T3277] veth1_vlan: entered promiscuous mode [ 30.237494][ T3264] veth0_vlan: entered promiscuous mode [ 30.247749][ T3265] veth0_vlan: entered promiscuous mode [ 30.254397][ T3268] veth0_vlan: entered promiscuous mode [ 30.269319][ T3265] veth1_vlan: entered promiscuous mode [ 30.276461][ T3264] veth1_vlan: entered promiscuous mode [ 30.292266][ T3277] veth0_macvtap: entered promiscuous mode [ 30.303623][ T3268] veth1_vlan: entered promiscuous mode [ 30.315250][ T3264] veth0_macvtap: entered promiscuous mode [ 30.325975][ T3271] veth0_vlan: entered promiscuous mode [ 30.335227][ T3264] veth1_macvtap: entered promiscuous mode [ 30.345078][ T3277] veth1_macvtap: entered promiscuous mode [ 30.353548][ T3265] veth0_macvtap: entered promiscuous mode [ 30.362757][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.378826][ T3268] veth0_macvtap: entered promiscuous mode [ 30.386367][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.395918][ T3265] veth1_macvtap: entered promiscuous mode [ 30.403782][ T3277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.412653][ T3277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.421413][ T3277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.430130][ T3277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.440186][ T3271] veth1_vlan: entered promiscuous mode [ 30.446881][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.457343][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.467775][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.476616][ T3268] veth1_macvtap: entered promiscuous mode [ 30.484630][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.495171][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.506022][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.518540][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.529090][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.538892][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.549311][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.559924][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.569588][ T3264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.578479][ T3264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.587359][ T3264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.596101][ T3264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.609075][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.619665][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.629526][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.639982][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.650723][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.663225][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.672032][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.680836][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.689644][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.699964][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710509][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.720325][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.730776][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.740595][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.751118][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.761701][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.771066][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.781684][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.791709][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.802194][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.812012][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.822432][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.833093][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.849865][ T3268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.858773][ T3268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.867505][ T3268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.876260][ T3268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914407][ T3271] veth0_macvtap: entered promiscuous mode [ 30.922527][ T3264] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.942781][ T3271] veth1_macvtap: entered promiscuous mode [ 30.952747][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.963286][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.973204][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.984071][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.994005][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.997830][ T3407] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 31.004642][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.023964][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.034411][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.046199][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.056437][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.056673][ T3408] syz.0.1[3408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.067088][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.088143][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.092619][ T3408] syz.0.1[3408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.098628][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.107677][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 31.107735][ T29] audit: type=1400 audit(1727353265.209:123): avc: denied { read } for pid=3406 comm="syz.3.4" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.109798][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.124049][ T29] audit: type=1400 audit(1727353265.229:124): avc: denied { open } for pid=3406 comm="syz.3.4" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.125651][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.125662][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.125676][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.148803][ T29] audit: type=1400 audit(1727353265.229:125): avc: denied { prog_run } for pid=3404 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.159260][ T3408] syz.0.1[3408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.233711][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.248255][ T29] audit: type=1400 audit(1727353265.349:126): avc: denied { map_read map_write } for pid=3404 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.253336][ T3271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.280215][ T3271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.288988][ T3271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297837][ T3271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.311690][ T29] audit: type=1400 audit(1727353265.409:127): avc: denied { create } for pid=3404 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.331929][ T29] audit: type=1400 audit(1727353265.409:128): avc: denied { write } for pid=3404 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.352210][ T29] audit: type=1400 audit(1727353265.419:129): avc: denied { read } for pid=3404 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.396637][ T29] audit: type=1400 audit(1727353265.499:130): avc: denied { create } for pid=3414 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.417296][ T3415] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=3415 comm=syz.4.5 [ 31.429754][ T29] audit: type=1400 audit(1727353265.519:131): avc: denied { create } for pid=3414 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.449706][ T29] audit: type=1400 audit(1727353265.519:132): avc: denied { write } for pid=3414 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.466362][ T3415] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 31.611474][ T3435] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.6'. [ 31.620939][ T3435] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.6'. [ 32.145392][ T3464] loop0: detected capacity change from 0 to 1024 [ 32.177715][ T3464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.215715][ T3464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.288350][ T3471] loop4: detected capacity change from 0 to 1024 [ 32.299421][ T3471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.310719][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.363367][ T3471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.420458][ T3480] Zero length message leads to an empty skb [ 32.452946][ T3485] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.475664][ T3474] serio: Serial port ttyS3 [ 32.496860][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.616417][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.625081][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.630284][ T3492] loop1: detected capacity change from 0 to 512 [ 32.633629][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.642593][ T3492] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.23: casefold flag without casefold feature [ 32.662705][ T3492] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.23: couldn't read orphan inode 15 (err -117) [ 32.682021][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.707391][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.715876][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.724431][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.753520][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 32.761989][ T3493] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 33.399909][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.600594][ T3533] hsr_slave_0: left promiscuous mode [ 33.608305][ T3533] hsr_slave_1: left promiscuous mode [ 33.626956][ T3528] Cannot find del_set index 4 as target [ 33.674114][ T3528] dummy0: entered promiscuous mode [ 33.679360][ T3528] dummy0: entered allmulticast mode [ 33.736994][ T3536] serio: Serial port ptm0 [ 33.776480][ T3537] loop1: detected capacity change from 0 to 128 [ 33.899178][ T3541] loop0: detected capacity change from 0 to 1024 [ 33.919771][ T3541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.060565][ T3528] syz.1.32: attempt to access beyond end of device [ 34.060565][ T3528] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 34.812626][ T3560] hub 6-0:1.0: USB hub found [ 34.817625][ T3560] hub 6-0:1.0: 8 ports detected [ 34.888825][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.261161][ T3568] syz.4.43[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.261292][ T3568] syz.4.43[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.272886][ T3568] syz.4.43[3568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.292425][ T3568] syz.4.43 (3568) used greatest stack depth: 10728 bytes left [ 35.333318][ T3563] loop0: detected capacity change from 0 to 512 [ 35.357132][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.360528][ T3575] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 35.373798][ T3563] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.449367][ T3514] coredump: 1(syz.4.27): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 35.530451][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.544662][ T3577] loop2: detected capacity change from 0 to 2048 [ 35.575796][ T3583] loop0: detected capacity change from 0 to 512 [ 35.582347][ T3583] EXT4-fs: dax option not supported [ 35.589399][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.649812][ T3588] hsr_slave_0: left promiscuous mode [ 35.655758][ T3588] hsr_slave_1: left promiscuous mode [ 35.683987][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.712783][ T3592] loop2: detected capacity change from 0 to 1024 [ 35.731384][ T3592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.734309][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.740766][ T3594] loop1: detected capacity change from 0 to 512 [ 35.740966][ T3594] ======================================================= [ 35.740966][ T3594] WARNING: The mand mount option has been deprecated and [ 35.740966][ T3594] and is ignored by this kernel. Remove the mand [ 35.740966][ T3594] option from the mount to silence this warning. [ 35.740966][ T3594] ======================================================= [ 35.767083][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.775436][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.782968][ T3594] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.823172][ T3590] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 35.841359][ T3594] Process accounting resumed [ 35.875589][ T3594] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.910413][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.012929][ T3606] bond_slave_0: entered promiscuous mode [ 36.018621][ T3606] bond_slave_1: entered promiscuous mode [ 36.024373][ T3606] macsec1: entered promiscuous mode [ 36.029668][ T3606] bond0: entered promiscuous mode [ 36.035076][ T3606] macsec1: entered allmulticast mode [ 36.040360][ T3606] bond0: entered allmulticast mode [ 36.045561][ T3606] bond_slave_0: entered allmulticast mode [ 36.051273][ T3606] bond_slave_1: entered allmulticast mode [ 36.419907][ T3611] process 'syz.0.55' launched '/dev/fd/3' with NULL argv: empty string added [ 36.429792][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 36.429805][ T29] audit: type=1400 audit(1727353270.519:590): avc: denied { execute } for pid=3607 comm="syz.0.55" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.456855][ T29] audit: type=1400 audit(1727353270.529:591): avc: denied { execute_no_trans } for pid=3607 comm="syz.0.55" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.515946][ T3606] bond0: left allmulticast mode [ 36.520845][ T3606] bond_slave_0: left allmulticast mode [ 36.526337][ T3606] bond_slave_1: left allmulticast mode [ 36.531858][ T3606] bond0: left promiscuous mode [ 36.536888][ T3606] bond_slave_0: left promiscuous mode [ 36.542353][ T3606] bond_slave_1: left promiscuous mode [ 36.583535][ T3615] loop3: detected capacity change from 0 to 1024 [ 36.607707][ T3615] EXT4-fs: Ignoring removed orlov option [ 36.641468][ T3615] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 36.700860][ T29] audit: type=1400 audit(1727353270.659:592): avc: denied { create } for pid=3612 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.843551][ T29] audit: type=1400 audit(1727353270.939:593): avc: denied { create } for pid=3620 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.845612][ T3621] __nla_validate_parse: 1 callbacks suppressed [ 36.845624][ T3621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.59'. [ 36.930924][ T2965] IPVS: starting estimator thread 0... [ 36.944365][ T3627] loop0: detected capacity change from 0 to 1024 [ 36.951351][ T3627] EXT4-fs: Ignoring removed orlov option [ 36.957107][ T3627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.973266][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.997208][ T29] audit: type=1400 audit(1727353271.099:594): avc: denied { append } for pid=3626 comm="+}[@" path="/13/file1/cpuacct.usage_percpu_sys" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.024949][ T3625] IPVS: using max 3072 ests per chain, 153600 per kthread [ 37.035043][ T29] audit: type=1400 audit(1727353271.099:595): avc: denied { ioctl } for pid=3626 comm="+}[@" path="/13/file1/cpuacct.usage_percpu_sys" dev="loop0" ino=18 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.122178][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.327806][ T3638] loop1: detected capacity change from 0 to 1024 [ 37.356000][ T3638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.379327][ T3640] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 925 (only 8 groups) [ 37.391034][ T29] audit: type=1400 audit(1727353271.479:596): avc: denied { mounton } for pid=3634 comm="syz.0.63" path="/proc/39/task" dev="proc" ino=3902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 37.413270][ T29] audit: type=1400 audit(1727353271.479:597): avc: denied { mount } for pid=3634 comm="syz.0.63" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.437199][ T3638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.622868][ T29] audit: type=1326 audit(1727353271.719:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14b39df39 code=0x7ffc0000 [ 37.669988][ T29] audit: type=1326 audit(1727353271.759:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff14b39df39 code=0x7ffc0000 [ 37.673779][ T3644] loop2: detected capacity change from 0 to 512 [ 37.731578][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.765475][ T3646] Cannot find del_set index 4 as target [ 37.772339][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.782049][ T3646] dummy0: entered promiscuous mode [ 37.786601][ T3644] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.789905][ T3646] dummy0: entered allmulticast mode [ 37.816394][ T3651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.826782][ T3651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.870461][ T3646] loop3: detected capacity change from 0 to 128 [ 37.916538][ T3646] syz.3.67: attempt to access beyond end of device [ 37.916538][ T3646] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 39.221953][ T3672] loop0: detected capacity change from 0 to 512 [ 39.236555][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.266134][ T3672] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.283343][ T3663] coredump: 1(syz.3.69): written to core: VMAs: 34, size 91385856; core: 73991154 bytes, pos 91394048 [ 39.293418][ T3672] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 39.339234][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.396701][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.518446][ T3676] loop0: detected capacity change from 0 to 1024 [ 39.534888][ C0] hrtimer: interrupt took 39456 ns [ 39.566629][ T3676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.919130][ T3684] syz.2.77[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.919186][ T3684] syz.2.77[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.945655][ T3684] syz.2.77[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.228969][ T3709] 9pnet_virtio: no channels available for device [ 40.229673][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.263543][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.276067][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.276067][ T50] [ 40.277946][ T3709] loop3: detected capacity change from 0 to 2048 [ 40.285756][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 40.285773][ T50] EXT4-fs (loop0): Free/Dirty block details [ 40.285783][ T50] EXT4-fs (loop0): free_blocks=68451041280 [ 40.285796][ T50] EXT4-fs (loop0): dirty_blocks=4160 [ 40.315145][ T50] EXT4-fs (loop0): Block reservation details [ 40.321123][ T50] EXT4-fs (loop0): i_reserved_data_blocks=260 [ 40.335926][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 40.375660][ T3709] loop3: p1 < > p4 [ 40.380265][ T3709] loop3: p4 size 8388608 extends beyond EOD, truncated [ 40.451817][ T3730] loop0: detected capacity change from 0 to 512 [ 40.462011][ T3720] Cannot find del_set index 4 as target [ 40.484091][ T3720] dummy0: entered promiscuous mode [ 40.489328][ T3720] dummy0: entered allmulticast mode [ 40.505144][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.531843][ T3730] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.558370][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.562904][ T3720] loop2: detected capacity change from 0 to 128 [ 40.606169][ T3739] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.614122][ T3739] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 40.615285][ T3720] syz.2.80: attempt to access beyond end of device [ 40.615285][ T3720] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 40.675797][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 40.688179][ T3743] ------------[ cut here ]------------ [ 40.693662][ T3743] refcount_t: underflow; use-after-free. [ 40.699665][ T3743] WARNING: CPU: 1 PID: 3743 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 40.709084][ T3743] Modules linked in: [ 40.712969][ T3743] CPU: 1 UID: 0 PID: 3743 Comm: syz.0.88 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 40.723240][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.733332][ T3743] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 40.739559][ T3743] Code: 72 ff ff ff e8 ab 7c 71 ff 48 c7 c7 3e e8 b2 86 e8 df 5f 8a ff c6 05 76 29 f4 04 01 90 48 c7 c7 de 8a 1b 86 e8 1b 37 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 7c 71 ff 48 c7 c7 3b e8 b2 86 e8 [ 40.759367][ T3743] RSP: 0018:ffffc90001a93468 EFLAGS: 00010246 [ 40.765435][ T3743] RAX: 99eede1877b79800 RBX: ffff888118dd78e4 RCX: 0000000000040000 [ 40.773542][ T3743] RDX: ffffc90001d19000 RSI: 0000000000005ada RDI: 0000000000005adb [ 40.781504][ T3743] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 40.789472][ T3743] R10: 0001ffffffffffff R11: ffff888102108000 R12: ffff888117b15068 [ 40.797437][ T3743] R13: ffff888117b15000 R14: ffff888118dd78e4 R15: 0000000000000000 [ 40.805442][ T3743] FS: 00007fdefd3816c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 40.814434][ T3743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.821010][ T3743] CR2: 0000001b2fd16ff8 CR3: 0000000115a1e000 CR4: 00000000003506f0 [ 40.829043][ T3743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.837117][ T3743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.845094][ T3743] Call Trace: [ 40.848382][ T3743] [ 40.851317][ T3743] ? __warn+0x141/0x350 [ 40.855513][ T3743] ? report_bug+0x315/0x420 [ 40.860007][ T3743] ? refcount_warn_saturate+0x1c6/0x230 [ 40.865609][ T3743] ? handle_bug+0x60/0x90 [ 40.869939][ T3743] ? exc_invalid_op+0x1a/0x50 [ 40.874619][ T3743] ? asm_exc_invalid_op+0x1a/0x20 [ 40.879649][ T3743] ? __warn_printk+0x167/0x1b0 [ 40.884429][ T3743] ? refcount_warn_saturate+0x1c6/0x230 [ 40.889970][ T3743] ? refcount_warn_saturate+0x1c5/0x230 [ 40.896009][ T3743] sk_skb_reason_drop+0xe9/0x290 [ 40.900963][ T3743] j1939_session_put+0x157/0x2a0 [ 40.905902][ T3743] j1939_cancel_active_session+0x1d4/0x220 [ 40.911703][ T3743] j1939_netdev_notify+0x13a/0x1b0 [ 40.917001][ T3743] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 40.922619][ T3743] raw_notifier_call_chain+0x6f/0x1d0 [ 40.928076][ T3743] call_netdevice_notifiers_info+0xae/0x100 [ 40.933966][ T3743] dev_close_many+0x174/0x240 [ 40.938723][ T3743] unregister_netdevice_many_notify+0x263/0x11b0 [ 40.945370][ T3743] ? __list_add_valid_or_report+0x36/0xc0 [ 40.951236][ T3743] ? unregister_netdevice_queue+0x12b/0x220 [ 40.957123][ T3743] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 40.963374][ T3743] rtnl_dellink+0x380/0x580 [ 40.967981][ T3743] ? security_capable+0x81/0x90 [ 40.972816][ T3743] ? ns_capable+0x7d/0xb0 [ 40.977138][ T3743] ? __pfx_rtnl_dellink+0x10/0x10 [ 40.982204][ T3743] rtnetlink_rcv_msg+0x6aa/0x710 [ 40.987139][ T3743] ? __dev_queue_xmit+0x161/0x1fe0 [ 40.992333][ T3743] netlink_rcv_skb+0x12c/0x230 [ 40.997092][ T3743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 41.002556][ T3743] rtnetlink_rcv+0x1c/0x30 [ 41.007048][ T3743] netlink_unicast+0x599/0x670 [ 41.011793][ T3743] netlink_sendmsg+0x5cc/0x6e0 [ 41.016623][ T3743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.022020][ T3743] __sock_sendmsg+0x140/0x180 [ 41.026712][ T3743] ____sys_sendmsg+0x312/0x410 [ 41.031627][ T3743] __sys_sendmsg+0x1d9/0x270 [ 41.036216][ T3743] ? futex_wait+0x18e/0x1c0 [ 41.040762][ T3743] __x64_sys_sendmsg+0x46/0x50 [ 41.045596][ T3743] x64_sys_call+0x2689/0x2d60 [ 41.050283][ T3743] do_syscall_64+0xc9/0x1c0 [ 41.054824][ T3743] ? clear_bhb_loop+0x55/0xb0 [ 41.059497][ T3743] ? clear_bhb_loop+0x55/0xb0 [ 41.064153][ T3743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.070092][ T3743] RIP: 0033:0x7fdefe70df39 [ 41.074581][ T3743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.094373][ T3743] RSP: 002b:00007fdefd381038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.102808][ T3743] RAX: ffffffffffffffda RBX: 00007fdefe8c5f80 RCX: 00007fdefe70df39 [ 41.110863][ T3743] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 41.118832][ T3743] RBP: 00007fdefe780216 R08: 0000000000000000 R09: 0000000000000000 [ 41.126856][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.134905][ T3743] R13: 0000000000000000 R14: 00007fdefe8c5f80 R15: 00007ffeb468c888 [ 41.142952][ T3743] [ 41.145966][ T3743] ---[ end trace 0000000000000000 ]--- [ 41.151574][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 41.158020][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.165878][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.173685][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.181513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.189512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.197331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.205150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.212959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.220775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.228713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.236627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.244459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.252285][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.260132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.268023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.275840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.283716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.291576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.299393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.307272][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.315125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.323055][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.331051][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.338883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.346709][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.354519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.362325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.370271][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.378185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.386014][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.393797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.401784][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.409768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.417598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.425403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.433288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.441124][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.448944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.456796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.464730][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.472544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.480364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.488196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.496009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.503799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.511671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.519492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.527323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 41.535582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 41.616305][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 41.616316][ T29] audit: type=1400 audit(1727353275.719:679): avc: denied { ioctl } for pid=3744 comm="syz.3.89" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4511 ioctlcmd=0x73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.695972][ T3749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.89'. [ 42.405915][ T29] audit: type=1400 audit(1727353276.509:680): avc: denied { read } for pid=3752 comm="syz.3.91" name="ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.428944][ T29] audit: type=1400 audit(1727353276.509:681): avc: denied { open } for pid=3752 comm="syz.3.91" path="/dev/ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.570440][ T3761] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 43.177480][ T29] audit: type=1400 audit(1727353277.279:682): avc: denied { create } for pid=3764 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.197507][ T29] audit: type=1400 audit(1727353277.289:683): avc: denied { create } for pid=3764 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 43.216945][ T29] audit: type=1400 audit(1727353277.289:684): avc: denied { setopt } for pid=3764 comm="syz.2.94" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.257467][ T3769] loop3: detected capacity change from 0 to 256 [ 43.270809][ T3771] loop2: detected capacity change from 0 to 512 [ 43.287066][ T3771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.299887][ T3771] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.313898][ T29] audit: type=1326 audit(1727353277.419:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade4df39 code=0x7ffc0000 [ 43.337079][ T29] audit: type=1326 audit(1727353277.419:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade4df39 code=0x7ffc0000 [ 43.360381][ T29] audit: type=1326 audit(1727353277.419:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f59ade4df39 code=0x7ffc0000 [ 43.383536][ T29] audit: type=1326 audit(1727353277.419:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3770 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ade4df39 code=0x7ffc0000 [ 43.407899][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.374217][ T3821] loop2: detected capacity change from 0 to 512 [ 44.381967][ T3821] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.395067][ T3821] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.406079][ T3821] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.419313][ T3821] EXT4-fs (loop2): 1 truncate cleaned up [ 44.427998][ T3821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.468400][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.538777][ T3826] loop2: detected capacity change from 0 to 128 [ 44.547857][ T3826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.560049][ T3826] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.608572][ T3271] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.780187][ T3832] syz.2.106 uses obsolete (PF_INET,SOCK_PACKET) [ 44.906937][ T3836] loop2: detected capacity change from 0 to 2048 [ 44.955235][ T3836] loop2: p2 < > [ 45.239815][ T3839] loop2: detected capacity change from 0 to 1764 [ 47.022010][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 47.022023][ T29] audit: type=1400 audit(1727353281.119:1120): avc: denied { mounton } for pid=3841 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.052169][ T29] audit: type=1400 audit(1727353281.129:1121): avc: denied { sys_module } for pid=3841 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.127775][ T3841] chnl_net:caif_netlink_parms(): no params data found [ 47.157678][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.164787][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.172120][ T3841] bridge_slave_0: entered allmulticast mode [ 47.178787][ T3841] bridge_slave_0: entered promiscuous mode [ 47.185967][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.193009][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.200452][ T3841] bridge_slave_1: entered allmulticast mode [ 47.206811][ T3841] bridge_slave_1: entered promiscuous mode [ 47.220698][ T3392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.242946][ T3841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.253443][ T29] audit: type=1400 audit(1727353281.349:1122): avc: denied { bind } for pid=3855 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.260233][ T3841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.272960][ T29] audit: type=1400 audit(1727353281.349:1123): avc: denied { listen } for pid=3855 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.310115][ T3841] team0: Port device team_slave_0 added [ 47.319464][ T3392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.331329][ T3841] team0: Port device team_slave_1 added [ 47.347649][ T3841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.354785][ T3841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.380819][ T3841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.392150][ T3841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.399128][ T3841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.425457][ T3841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.440677][ T3392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.467919][ T3841] hsr_slave_0: entered promiscuous mode [ 47.474135][ T3841] hsr_slave_1: entered promiscuous mode [ 47.480743][ T3841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.489240][ T3841] Cannot create hsr debugfs directory [ 47.497577][ T3392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.583847][ T3392] bridge_slave_1: left allmulticast mode [ 47.589543][ T3392] bridge_slave_1: left promiscuous mode [ 47.595331][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.604592][ T3392] bridge_slave_0: left allmulticast mode [ 47.610268][ T3392] bridge_slave_0: left promiscuous mode [ 47.615923][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.738197][ T3392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.748745][ T3392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.759093][ T3392] bond0 (unregistering): Released all slaves [ 47.811263][ T3392] hsr_slave_0: left promiscuous mode [ 47.818469][ T3392] hsr_slave_1: left promiscuous mode [ 47.824340][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.831830][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.840979][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.848486][ T3392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.858587][ T3392] veth1_macvtap: left promiscuous mode [ 47.864173][ T3392] veth0_macvtap: left promiscuous mode [ 47.869766][ T3392] veth1_vlan: left promiscuous mode [ 47.875066][ T3392] veth0_vlan: left promiscuous mode [ 47.951852][ T3392] team0 (unregistering): Port device team_slave_1 removed [ 47.961662][ T3392] team0 (unregistering): Port device team_slave_0 removed [ 48.129012][ T29] audit: type=1326 audit(1727353282.229:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.152611][ T29] audit: type=1326 audit(1727353282.229:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.176061][ T29] audit: type=1326 audit(1727353282.229:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.199942][ T29] audit: type=1326 audit(1727353282.229:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.223276][ T29] audit: type=1326 audit(1727353282.229:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.246665][ T29] audit: type=1326 audit(1727353282.229:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 48.258687][ T3897] loop3: detected capacity change from 0 to 128 [ 48.332219][ T3875] chnl_net:caif_netlink_parms(): no params data found [ 48.409281][ T3841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.417639][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.424702][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.432201][ T3875] bridge_slave_0: entered allmulticast mode [ 48.438551][ T3875] bridge_slave_0: entered promiscuous mode [ 48.446877][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.454001][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.461423][ T3875] bridge_slave_1: entered allmulticast mode [ 48.468827][ T3875] bridge_slave_1: entered promiscuous mode [ 48.475012][ T3841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.483229][ T3841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.500472][ T3841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.515070][ T3875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.526583][ T3875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.566600][ T3918] loop3: detected capacity change from 0 to 512 [ 48.584434][ T3875] team0: Port device team_slave_0 added [ 48.598164][ T3875] team0: Port device team_slave_1 added [ 48.615084][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.637735][ T3928] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 48.651794][ T3926] IPVS: stopping master sync thread 3928 ... [ 48.659014][ T3875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.666005][ T3875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.691992][ T3875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.706175][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.719271][ T3875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.726278][ T3875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.752444][ T3875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.767891][ T3926] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.776727][ T3926] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.785483][ T3926] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.794253][ T3926] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.817935][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.828804][ T3943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.856709][ T3875] hsr_slave_0: entered promiscuous mode [ 48.863970][ T3875] hsr_slave_1: entered promiscuous mode [ 48.871127][ T3875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.878754][ T3875] Cannot create hsr debugfs directory [ 48.887739][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.919033][ T3841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.962551][ T3841] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.977484][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.984545][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.012909][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.020106][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.034148][ T40] bridge_slave_1: left allmulticast mode [ 49.039848][ T40] bridge_slave_1: left promiscuous mode [ 49.045542][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.054612][ T40] bridge_slave_0: left allmulticast mode [ 49.060690][ T40] bridge_slave_0: left promiscuous mode [ 49.066439][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.138986][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.152112][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.162810][ T40] bond0 (unregistering): Released all slaves [ 49.214062][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.222483][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.229156][ T3957] loop3: detected capacity change from 0 to 1024 [ 49.237625][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.245808][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.256297][ T40] veth1_macvtap: left promiscuous mode [ 49.262100][ T40] veth0_macvtap: left promiscuous mode [ 49.266872][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.268076][ T40] veth1_vlan: left promiscuous mode [ 49.286264][ T40] veth0_vlan: left promiscuous mode [ 49.372693][ T40] team0 (unregistering): Port device team_slave_1 removed [ 49.383666][ T40] team0 (unregistering): Port device team_slave_0 removed [ 49.517745][ T3841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.808244][ T3841] veth0_vlan: entered promiscuous mode [ 49.817048][ T3841] veth1_vlan: entered promiscuous mode [ 49.841575][ T3875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.852569][ T3875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.861472][ T3875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.870770][ T3841] veth0_macvtap: entered promiscuous mode [ 49.878780][ T3875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.891858][ T3841] veth1_macvtap: entered promiscuous mode [ 49.909333][ T40] IPVS: stop unused estimator thread 0... [ 49.913734][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.925905][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.935907][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.946538][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.956496][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.967218][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.980384][ T3841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.992580][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.003119][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.013034][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.023537][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.033425][ T3841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.043890][ T3841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.054581][ T3841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.063776][ T3841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.072732][ T3841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.082084][ T3841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092099][ T3841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.128573][ T3277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.133874][ T3875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.166838][ T3875] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.175902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.183047][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.203044][ T3875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.213504][ T3875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.227928][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.235039][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.294953][ T3875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.359154][ T3875] veth0_vlan: entered promiscuous mode [ 50.369480][ T3875] veth1_vlan: entered promiscuous mode [ 50.397192][ T3875] veth0_macvtap: entered promiscuous mode [ 50.416009][ T3875] veth1_macvtap: entered promiscuous mode [ 50.433306][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.444789][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.455075][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.465688][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.475647][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.486122][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.495954][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.506500][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.522482][ T3875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.546613][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.557121][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.567018][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.577740][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.587742][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.598362][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.608202][ T3875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.618749][ T3875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.630266][ T3875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.639127][ T3875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.647940][ T3875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656644][ T3875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.665394][ T3875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.807812][ T4034] pimreg: entered allmulticast mode [ 50.899182][ T4029] pimreg: left allmulticast mode [ 51.059404][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 51.193841][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.200973][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.209564][ T4037] bridge_slave_0: entered allmulticast mode [ 51.216460][ T4037] bridge_slave_0: entered promiscuous mode [ 51.223598][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.230774][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.239592][ T4037] bridge_slave_1: entered allmulticast mode [ 51.247673][ T4037] bridge_slave_1: entered promiscuous mode [ 51.276317][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 51.285208][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.292711][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.306849][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.314278][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.346664][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.362378][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.393086][ T4037] team0: Port device team_slave_0 added [ 51.401410][ T4037] team0: Port device team_slave_1 added [ 51.422788][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.430106][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.456876][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.490616][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.497629][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.523685][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.556399][ T4037] hsr_slave_0: entered promiscuous mode [ 51.568158][ T4037] hsr_slave_1: entered promiscuous mode [ 51.574193][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.582140][ T4037] Cannot create hsr debugfs directory [ 51.599217][ T4067] veth3: entered promiscuous mode [ 51.650210][ T4037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.708236][ T4072] syz.1.129[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.708325][ T4072] syz.1.129[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.710777][ T4037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.722009][ T4072] syz.1.129[4072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.768052][ T4072] erspan0: entered promiscuous mode [ 51.787747][ T4072] erspan0: left promiscuous mode [ 51.808139][ T4037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.886247][ T4037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.961163][ T4078] loop4: detected capacity change from 0 to 2048 [ 51.974415][ T4037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.985235][ T4037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.994946][ T4037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.003693][ T4037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.015635][ T4078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.017900][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.035242][ T4037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.042808][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.044957][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 52.044979][ T29] audit: type=1400 audit(1727353286.139:1205): avc: denied { bind } for pid=4075 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.051184][ T4037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.057246][ T29] audit: type=1400 audit(1727353286.139:1206): avc: denied { write } for pid=4075 comm="syz.1.131" laddr=::1 lport=38 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.142246][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.200087][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.209238][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.237608][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.260094][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.267202][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.319091][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.323802][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.335664][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.386221][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 52.423868][ T29] audit: type=1400 audit(1727353286.519:1207): avc: denied { write } for pid=4090 comm="syz.4.134" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.448410][ T29] audit: type=1400 audit(1727353286.519:1208): avc: denied { bind } for pid=4090 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.453523][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.505933][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 52.517551][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 52.527570][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 52.571330][ T4037] veth0_vlan: entered promiscuous mode [ 52.581334][ T4037] veth1_vlan: entered promiscuous mode [ 52.598047][ T4037] veth0_macvtap: entered promiscuous mode [ 52.606306][ T4037] veth1_macvtap: entered promiscuous mode [ 52.617095][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.627732][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.638361][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.648827][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.658876][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.669426][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.679575][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.690118][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.701673][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.713442][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.723918][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.733843][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.744323][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.754411][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.764884][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.774769][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.785310][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.796974][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.810221][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.819203][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.827979][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.836687][ T4037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.165744][ T29] audit: type=1326 audit(1727353287.269:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.189444][ T29] audit: type=1326 audit(1727353287.269:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.212975][ T29] audit: type=1326 audit(1727353287.269:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.236392][ T29] audit: type=1326 audit(1727353287.269:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.259813][ T29] audit: type=1326 audit(1727353287.269:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.283120][ T29] audit: type=1326 audit(1727353287.269:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd553cadf39 code=0x7ffc0000 [ 53.427827][ T4124] loop3: detected capacity change from 0 to 512 [ 53.450056][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.463118][ T4124] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.512482][ T3277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.644381][ T4136] loop4: detected capacity change from 0 to 512 [ 53.738885][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.752573][ T4136] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.881209][ T4140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 53.902043][ T4142] loop1: detected capacity change from 0 to 1024 [ 53.930874][ T4142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.491621][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.650578][ T4156] loop4: detected capacity change from 0 to 128 [ 54.749556][ T4156] syz.4.148: attempt to access beyond end of device [ 54.749556][ T4156] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 54.799167][ T4156] syz.4.148: attempt to access beyond end of device [ 54.799167][ T4156] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 54.839399][ T141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.022870][ T141] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.035606][ T141] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.035606][ T141] [ 55.045611][ T141] EXT4-fs (loop1): Total free blocks count 0 [ 55.051664][ T141] EXT4-fs (loop1): Free/Dirty block details [ 55.057569][ T141] EXT4-fs (loop1): free_blocks=68451041280 [ 55.063551][ T141] EXT4-fs (loop1): dirty_blocks=11264 [ 55.069056][ T141] EXT4-fs (loop1): Block reservation details [ 55.075423][ T141] EXT4-fs (loop1): i_reserved_data_blocks=704 [ 55.142821][ T4165] syzkaller0: entered allmulticast mode [ 55.230897][ T4168] loop0: detected capacity change from 0 to 1024 [ 55.239395][ T4165] syzkaller0: left allmulticast mode [ 55.251188][ T4168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.278956][ T4168] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.292901][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 55.328271][ T4168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.355526][ T4173] loop4: detected capacity change from 0 to 164 [ 55.402826][ T4173] Unable to read rock-ridge attributes [ 55.402982][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 55.422012][ T4173] tipc: Started in network mode [ 55.427102][ T4173] tipc: Node identity 429aabf9ed3b, cluster identity 4711 [ 55.434364][ T4173] tipc: Enabled bearer , priority 0 [ 55.449167][ T4173] ªªªªªª: renamed from syzkaller0 [ 55.481170][ T4173] tipc: Disabling bearer [ 55.532337][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.599153][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.621064][ T4186] dccp_close: ABORT with 23 bytes unread [ 55.626807][ T4191] loop1: detected capacity change from 0 to 512 [ 55.658948][ T4191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.667378][ T4195] loop4: detected capacity change from 0 to 1024 [ 55.678400][ T4191] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.696919][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.721747][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.750536][ T4195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.894433][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.915770][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 56.269676][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.276832][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.335884][ T4177] bridge_slave_0: entered allmulticast mode [ 56.342506][ T4177] bridge_slave_0: entered promiscuous mode [ 56.362464][ T11] bridge_slave_1: left allmulticast mode [ 56.368297][ T11] bridge_slave_1: left promiscuous mode [ 56.373987][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.447165][ T4210] syz.3.163[4210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.447323][ T4210] syz.3.163[4210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.470463][ T11] bridge_slave_0: left allmulticast mode [ 56.476125][ T4210] syz.3.163[4210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.481756][ T11] bridge_slave_0: left promiscuous mode [ 56.504671][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.575105][ T4168] syz.0.154 (4168) used greatest stack depth: 7288 bytes left [ 56.586718][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.650565][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.691800][ T4217] loop0: detected capacity change from 0 to 512 [ 56.811233][ T4217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.826586][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.838580][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.849079][ T4217] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.862152][ T11] bond0 (unregistering): Released all slaves [ 56.967033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.974571][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.984702][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.992327][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.005364][ T11] veth1_vlan: left promiscuous mode [ 57.010665][ T11] veth0_vlan: left promiscuous mode [ 57.108244][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.118610][ T11] team0 (unregistering): Port device team_slave_0 removed [ 57.154450][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.161706][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.170563][ T4177] bridge_slave_1: entered allmulticast mode [ 57.177069][ T4177] bridge_slave_1: entered promiscuous mode [ 57.192405][ T4210] erspan0: entered promiscuous mode [ 57.199099][ T4210] erspan0: left promiscuous mode [ 57.234495][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.255488][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 57.255515][ T29] audit: type=1326 audit(1727353291.359:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.268572][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.321916][ T29] audit: type=1326 audit(1727353291.389:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.374848][ T29] audit: type=1326 audit(1727353291.469:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.380121][ T4236] loop3: detected capacity change from 0 to 256 [ 57.398670][ T29] audit: type=1326 audit(1727353291.469:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.407537][ T4236] msdos: Bad value for 'gid' [ 57.433289][ T4236] msdos: Bad value for 'gid' [ 57.439734][ T29] audit: type=1326 audit(1727353291.479:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.463648][ T29] audit: type=1326 audit(1727353291.479:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.487726][ T29] audit: type=1326 audit(1727353291.479:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.513543][ T29] audit: type=1326 audit(1727353291.479:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.537447][ T29] audit: type=1326 audit(1727353291.479:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.560659][ T29] audit: type=1326 audit(1727353291.479:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.3.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 57.629266][ T4177] team0: Port device team_slave_0 added [ 57.637705][ T4177] team0: Port device team_slave_1 added [ 57.650516][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.723901][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.730965][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.757242][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.770027][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.777108][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.797129][ T4244] loop1: detected capacity change from 0 to 128 [ 57.803189][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.848459][ T4177] hsr_slave_0: entered promiscuous mode [ 57.855286][ T4177] hsr_slave_1: entered promiscuous mode [ 57.861809][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.870368][ T4177] Cannot create hsr debugfs directory [ 57.945736][ T4258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.954265][ T4258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.217908][ T4283] loop4: detected capacity change from 0 to 256 [ 58.266412][ T4177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.276183][ T4177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.286586][ T4177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.296642][ T4177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.345961][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.362905][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.373512][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.380772][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.393646][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.400769][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.540510][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.635706][ T4177] veth0_vlan: entered promiscuous mode [ 58.641879][ T4326] @ÿ: renamed from veth0_vlan (while UP) [ 58.660307][ T4177] veth1_vlan: entered promiscuous mode [ 58.685299][ T4177] veth0_macvtap: entered promiscuous mode [ 58.697507][ T4177] veth1_macvtap: entered promiscuous mode [ 58.705595][ T4304] dns_resolver: Unsupported content type (1) [ 58.709584][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.722056][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.731899][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.742477][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.753063][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.764836][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.775377][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.785840][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.797807][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.806127][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.816591][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.826710][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.837349][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.847261][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.857850][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.867736][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.878361][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.890578][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.902589][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.911556][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.920546][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.929469][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.062772][ T4346] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 59.074521][ T4346] team0: Port device netdevsim1 added [ 59.085306][ T4346] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 59.097963][ T4346] team0: Port device netdevsim1 removed [ 59.106396][ T4346] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 59.162506][ T4349] syz.3.184[4349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.162746][ T4349] syz.3.184[4349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.176817][ T4349] syz.3.184[4349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.848966][ T4352] loop2: detected capacity change from 0 to 1024 [ 59.862035][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 59.879479][ T4355] loop3: detected capacity change from 0 to 512 [ 59.892597][ T4355] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 59.906550][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.710941][ T4374] loop0: detected capacity change from 0 to 128 [ 60.721883][ T4177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.766053][ T4378] loop2: detected capacity change from 0 to 512 [ 60.774575][ T4378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.799836][ T4376] loop4: detected capacity change from 0 to 4096 [ 60.800086][ T4378] EXT4-fs (loop2): 1 truncate cleaned up [ 60.821081][ T4378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.842599][ T4376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.880338][ T4177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.958839][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.248579][ T4396] loop2: detected capacity change from 0 to 1024 [ 61.278269][ T4396] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 61.288078][ T4396] EXT4-fs (loop2): group descriptors corrupted! [ 61.321100][ T4402] loop1: detected capacity change from 0 to 2048 [ 61.353502][ T4396] loop2: detected capacity change from 0 to 256 [ 61.385592][ T4402] loop1: p1 < > p4 [ 61.390250][ T4402] loop1: p4 size 8388608 extends beyond EOD, truncated [ 61.466662][ T2966] loop1: p1 < > p4 [ 61.485035][ T2966] loop1: p4 size 8388608 extends beyond EOD, truncated [ 61.544671][ T4412] loop1: detected capacity change from 0 to 164 [ 61.552162][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.559164][ T4414] loop3: detected capacity change from 0 to 512 [ 61.565957][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.580592][ T4412] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.595324][ T4414] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.615672][ T4412] syz.1.197: attempt to access beyond end of device [ 61.615672][ T4412] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.637419][ T4414] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 61.659256][ T4412] syz.1.197: attempt to access beyond end of device [ 61.659256][ T4412] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.807821][ T4418] loop1: detected capacity change from 0 to 512 [ 61.820272][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.851760][ T4418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.868223][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.879527][ T4420] bond0 (unregistering): Released all slaves [ 61.884996][ T4418] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.935322][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.093600][ T4384] loop0: detected capacity change from 0 to 1024 [ 62.105844][ T4384] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.127309][ T4384] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.187: Invalid block bitmap block 0 in block_group 0 [ 62.141215][ T4384] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.187: Failed to acquire dquot type 0 [ 62.159694][ T4384] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.187: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.173184][ T4384] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.187: Invalid inode bitmap blk 0 in block_group 0 [ 62.187973][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:3: Failed to release dquot type 0 [ 62.200035][ T4384] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 62.226751][ T4384] EXT4-fs (loop0): 1 orphan inode deleted [ 62.244210][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.265950][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 62.266011][ T29] audit: type=1326 audit(1727353296.369:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.295801][ T29] audit: type=1326 audit(1727353296.369:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.319350][ T29] audit: type=1326 audit(1727353296.369:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.352683][ T29] audit: type=1326 audit(1727353296.449:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.376064][ T29] audit: type=1326 audit(1727353296.449:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.399490][ T29] audit: type=1326 audit(1727353296.449:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.422886][ T29] audit: type=1326 audit(1727353296.449:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.459773][ T29] audit: type=1326 audit(1727353296.519:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.483268][ T29] audit: type=1326 audit(1727353296.519:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.506681][ T29] audit: type=1326 audit(1727353296.549:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5cb809df39 code=0x7ffc0000 [ 62.564819][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 62.609600][ T4437] hub 6-0:1.0: USB hub found [ 62.614992][ T4437] hub 6-0:1.0: 8 ports detected [ 62.723353][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.243696][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 63.252568][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.259995][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.291597][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.299202][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.367504][ T4464] sctp: [Deprecated]: syz.4.217 (pid 4464) Use of int in max_burst socket option. [ 63.367504][ T4464] Use struct sctp_assoc_value instead [ 63.447376][ T4469] loop4: detected capacity change from 0 to 1024 [ 63.480175][ T4469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.620593][ T4479] loop0: detected capacity change from 0 to 512 [ 63.630963][ T4479] EXT4-fs: Ignoring removed orlov option [ 63.878863][ T4479] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.890410][ T4479] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 63.900545][ T4479] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.223: Corrupt directory, running e2fsck is recommended [ 64.047697][ T4479] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 64.056153][ T4479] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.223: corrupted in-inode xattr: invalid ea_ino [ 64.070551][ T4479] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.223: couldn't read orphan inode 15 (err -117) [ 64.083266][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.107407][ T4479] veth3: entered promiscuous mode [ 64.121585][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.153115][ T4492] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 64.855949][ T4504] loop3: detected capacity change from 0 to 1024 [ 64.865457][ T4507] loop2: detected capacity change from 0 to 512 [ 64.872700][ T4504] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.898603][ T4507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.914986][ T4504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.943791][ T4507] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.978006][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.027733][ T4507] loop2: detected capacity change from 512 to 11 [ 65.035211][ T4507] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 65.045154][ T3277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.061736][ T4507] EXT4-fs error (device loop2): ext4_alloc_file_blocks:4545: inode #19: comm syz.2.231: mark_inode_dirty error [ 65.086043][ T4177] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 65.128578][ T4177] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 65.182426][ T4521] loop4: detected capacity change from 0 to 512 [ 65.190787][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 65.216581][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 65.230206][ T4521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.243182][ T4521] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.243428][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 65.287712][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 65.315570][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.327518][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 65.340862][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 65.378405][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.647883][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 65.656832][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.664351][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.682305][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.689928][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.969866][ T4550] loop4: detected capacity change from 0 to 512 [ 65.980141][ T4552] syz.1.248[4552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.980195][ T4552] syz.1.248[4552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.992380][ T4552] syz.1.248[4552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.008842][ T4552] loop1: detected capacity change from 0 to 512 [ 66.037745][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.047313][ T4552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.051349][ T4550] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.062901][ T4552] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.100368][ T4552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.111549][ T4552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.127793][ T4552] bond0 (unregistering): Released all slaves [ 66.145257][ T3841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.172043][ T4558] netlink: 2 bytes leftover after parsing attributes in process `syz.4.249'. [ 66.205648][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.288512][ T4562] team0 (unregistering): Port device team_slave_0 removed [ 66.299683][ T4562] team0 (unregistering): Port device team_slave_1 removed [ 66.506823][ T4571] loop1: detected capacity change from 0 to 512 [ 66.546079][ T4571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.902699][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.277928][ T4584] loop0: detected capacity change from 0 to 8192 [ 67.421630][ T4594] loop1: detected capacity change from 0 to 512 [ 67.563373][ T4594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.627076][ T4594] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.744241][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 67.744254][ T29] audit: type=1326 audit(1727353301.839:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.784400][ T29] audit: type=1326 audit(1727353301.839:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.787255][ T4605] loop3: detected capacity change from 0 to 512 [ 67.807787][ T29] audit: type=1326 audit(1727353301.839:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.838815][ T29] audit: type=1326 audit(1727353301.839:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.862444][ T29] audit: type=1326 audit(1727353301.839:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.885922][ T29] audit: type=1326 audit(1727353301.839:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.909322][ T29] audit: type=1326 audit(1727353301.839:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.932685][ T29] audit: type=1326 audit(1727353301.839:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.955897][ T29] audit: type=1326 audit(1727353301.849:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 67.979265][ T29] audit: type=1326 audit(1727353301.849:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4593 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd3af6df39 code=0x7ffc0000 [ 68.006908][ T4605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.031593][ T4605] EXT4-fs (loop3): 1 truncate cleaned up [ 68.046551][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.064166][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.100823][ T4610] loop1: detected capacity change from 0 to 512 [ 68.146269][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.159913][ T3277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.186646][ T4610] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.286415][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.289806][ T4618] loop3: detected capacity change from 0 to 4096 [ 68.304674][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.348766][ T4621] loop1: detected capacity change from 0 to 256 [ 68.385222][ T4621] vfat: Unknown parameter '(.¹Ñ:ôÔ£lö [ 68.385222][ T4621] IÍ:V£@q+QÅ—"V' [ 68.416439][ T4623] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 68.434935][ T4621] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 68.464551][ T4625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4625 comm=syz.4.273 [ 68.485588][ T3277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.575799][ T4595] coredump: 76(syz.0.258): written to core: VMAs: 29, size 91123712; core: 62243502 bytes, pos 91131904 [ 68.669260][ T4635] loop4: detected capacity change from 0 to 128 [ 68.716830][ T4638] hsr_slave_0: left promiscuous mode [ 68.741199][ T4638] hsr_slave_1: left promiscuous mode [ 68.755769][ T4643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.767641][ T4643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.010807][ T4656] loop1: detected capacity change from 0 to 512 [ 69.096514][ T4656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.145068][ T4656] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.191405][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.766314][ T4667] loop3: detected capacity change from 0 to 256 [ 69.825468][ T4666] loop0: detected capacity change from 0 to 4096 [ 69.867527][ T4666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.945039][ T4508] kmmpd-loop2: attempt to access beyond end of device [ 69.945039][ T4508] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 69.958491][ T4508] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 70.009723][ T4669] Process accounting resumed [ 70.020633][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.062721][ T57] EXT4-fs error: 12141 callbacks suppressed [ 70.062746][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 70.088044][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 70.100963][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 70.111891][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 70.112484][ T4675] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 70.124304][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 70.141730][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 70.154796][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 70.155911][ T4675] team0: Port device netdevsim1 added [ 70.169318][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 70.185715][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 70.205527][ T4678] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 70.216309][ T4678] team0: Port device netdevsim1 removed [ 70.221205][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 70.223700][ T4678] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 70.248271][ T4677] loop0: detected capacity change from 0 to 512 [ 70.268249][ T4677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.281685][ T4677] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.310682][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 70.356766][ T4688] netlink: 256 bytes leftover after parsing attributes in process `syz.1.293'. [ 70.358275][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.388964][ T4695] loop0: detected capacity change from 0 to 512 [ 70.424252][ T4695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.445087][ T4695] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.490667][ T4037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.858969][ T4710] loop0: detected capacity change from 0 to 1024 [ 70.865979][ T4710] EXT4-fs: Ignoring removed bh option [ 70.877402][ T4710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.244460][ T4715] loop1: detected capacity change from 0 to 128 [ 71.290222][ T4720] loop1: detected capacity change from 0 to 512 [ 71.297009][ T4720] EXT4-fs: Ignoring removed bh option [ 71.303828][ T4720] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.301: invalid block [ 71.316889][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.301: couldn't read orphan inode 15 (err -117) [ 71.330100][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.388990][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.748411][ T4723] loop1: detected capacity change from 0 to 1024 [ 71.775681][ T4723] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.812735][ T4723] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.303: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 71.848951][ T4723] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.303: couldn't read orphan inode 11 (err -117) [ 71.873839][ T4723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.914128][ T4723] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.303: Invalid block bitmap block 0 in block_group 0 [ 71.946059][ T4723] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.303: Failed to acquire dquot type 0 [ 71.968212][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.978952][ T4117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.999807][ T4727] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 72.016761][ T4727] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 72.038310][ T4730] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 72.053878][ T4732] tipc: Started in network mode [ 72.058986][ T4732] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 72.069435][ T4732] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.077637][ T4732] tipc: Enabled bearer , priority 10 [ 72.088303][ T4732] loop1: detected capacity change from 0 to 512 [ 72.107042][ T4732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.119976][ T4732] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.140239][ T3875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.190287][ T3392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.227987][ T3392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.288651][ T3392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.339124][ T3392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.398611][ T3392] bridge_slave_1: left allmulticast mode [ 72.404286][ T3392] bridge_slave_1: left promiscuous mode [ 72.409964][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.418155][ T3392] bridge_slave_0: left allmulticast mode [ 72.423944][ T3392] bridge_slave_0: left promiscuous mode [ 72.429782][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.548121][ T3392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.558659][ T3392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.569018][ T3392] bond0 (unregistering): Released all slaves [ 72.618267][ T3392] hsr_slave_0: left promiscuous mode [ 72.624061][ T3392] hsr_slave_1: left promiscuous mode [ 72.631887][ T3392] veth1_macvtap: left promiscuous mode [ 72.637542][ T3392] veth0_macvtap: left promiscuous mode [ 72.643127][ T3392] veth1_vlan: left promiscuous mode [ 72.648377][ T3392] veth0_vlan: left promiscuous mode [ 72.739117][ T3392] team0 (unregistering): Port device team_slave_1 removed [ 72.749525][ T3392] team0 (unregistering): Port device team_slave_0 removed [ 72.966708][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.978728][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.075063][ T4208] tipc: Node number set to 1 [ 73.120777][ T4741] chnl_net:caif_netlink_parms(): no params data found [ 73.154310][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.161962][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.169688][ T4741] bridge_slave_0: entered allmulticast mode [ 73.176011][ T4741] bridge_slave_0: entered promiscuous mode [ 73.182819][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.190188][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.197391][ T4741] bridge_slave_1: entered allmulticast mode [ 73.203819][ T4741] bridge_slave_1: entered promiscuous mode [ 73.221564][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.232769][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.251949][ T4741] team0: Port device team_slave_0 added [ 73.258344][ T4741] team0: Port device team_slave_1 added [ 73.273503][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.280642][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.306569][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.317958][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.325643][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.352027][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.376712][ T4741] hsr_slave_0: entered promiscuous mode [ 73.382721][ T4741] hsr_slave_1: entered promiscuous mode [ 73.389074][ T4741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.397006][ T4741] Cannot create hsr debugfs directory [ 73.618042][ T4741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.627261][ T4741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.635977][ T4741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.645118][ T4741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.659389][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.666539][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.674538][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.681599][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.713108][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.725889][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.733911][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.747224][ T4741] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.757814][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.764887][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.787265][ T4741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.797890][ T4741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.811840][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.818905][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.874721][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.947096][ T4741] veth0_vlan: entered promiscuous mode [ 73.956271][ T4741] veth1_vlan: entered promiscuous mode [ 73.972167][ T4741] veth0_macvtap: entered promiscuous mode [ 73.980327][ T4741] veth1_macvtap: entered promiscuous mode [ 73.991598][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.002154][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.012073][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.022703][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.032763][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.043266][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054029][ T15] ================================================================== [ 74.055041][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.062085][ T15] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 74.062111][ T15] [ 74.062116][ T15] race at unknown origin, with assert no writes to 0xffff888100ff2168 of 4 bytes by task 15 on cpu 0: [ 74.089905][ T15] dequeue_entities+0x6df/0x760 [ 74.094735][ T15] pick_next_task_fair+0x7d/0x410 [ 74.099741][ T15] __schedule+0x284/0x940 [ 74.104084][ T15] schedule+0x55/0xc0 [ 74.108091][ T15] smpboot_thread_fn+0x37b/0x4c0 [ 74.113024][ T15] kthread+0x1d1/0x210 [ 74.117072][ T15] ret_from_fork+0x4b/0x60 [ 74.121499][ T15] ret_from_fork_asm+0x1a/0x30 [ 74.126249][ T15] [ 74.128553][ T15] value changed: 0x00000000 -> 0x00000001 [ 74.134245][ T15] [ 74.136547][ T15] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 74.142667][ T15] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 74.154355][ T15] Tainted: [W]=WARN [ 74.158134][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.168164][ T15] ================================================================== [ 74.182477][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 74.182494][ T29] audit: type=1400 audit(1727353308.289:1965): avc: denied { write } for pid=3255 comm="syz-executor" path="pipe:[760]" dev="pipefs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 74.468829][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.557774][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.626780][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.678182][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.748050][ T11] bridge_slave_1: left allmulticast mode [ 74.753738][ T11] bridge_slave_1: left promiscuous mode [ 74.759409][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.768173][ T11] bridge_slave_0: left allmulticast mode [ 74.773822][ T11] bridge_slave_0: left promiscuous mode [ 74.779515][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.965801][ T11] tipc: Disabling bearer [ 74.971138][ T11] tipc: Left network mode [ 74.978075][ T11] hsr_slave_0: left promiscuous mode [ 74.984021][ T11] hsr_slave_1: left promiscuous mode [ 74.984929][ T4508] kmmpd-loop2: attempt to access beyond end of device [ 74.984929][ T4508] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 75.003366][ T4508] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 75.014110][ T11] veth1_macvtap: left promiscuous mode [ 75.020138][ T11] veth0_macvtap: left promiscuous mode [ 75.025908][ T11] veth1_vlan: left promiscuous mode [ 75.031938][ T11] veth0_vlan: left promiscuous mode [ 75.064943][ T57] EXT4-fs error: 28484 callbacks suppressed [ 75.064959][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 75.081265][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 75.093301][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 75.103462][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 75.116729][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 75.126520][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 75.138547][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 75.148699][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 75.162336][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 75.171540][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 75.440450][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.450848][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.487734][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.498173][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.557047][ T11] bond0: (slave netdevsim1): Releasing backup interface [ 75.565874][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.576388][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.648016][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.658551][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.722872][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.798298][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.867274][ T11] bond0: (slave netdevsim1): Releasing backup interface [ 75.876668][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.928527][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.987895][ T11] bridge_slave_1: left allmulticast mode [ 75.993643][ T11] bridge_slave_1: left promiscuous mode [ 75.999331][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.007767][ T11] bridge_slave_0: left allmulticast mode [ 76.013569][ T11] bridge_slave_0: left promiscuous mode [ 76.019440][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.027551][ T11] bridge_slave_1: left allmulticast mode [ 76.033652][ T11] bridge_slave_1: left promiscuous mode [ 76.039436][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.047502][ T11] bridge_slave_0: left allmulticast mode [ 76.053147][ T11] bridge_slave_0: left promiscuous mode [ 76.058968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.297540][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.307831][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.317969][ T11] bond0 (unregistering): Released all slaves [ 76.327390][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.338217][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.348613][ T11] bond0 (unregistering): Released all slaves [ 76.406772][ T11] tipc: Left network mode [ 76.413929][ T11] hsr_slave_0: left promiscuous mode [ 76.419872][ T11] hsr_slave_1: left promiscuous mode [ 76.425579][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.433008][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.440465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.447921][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.458354][ T11] veth1_macvtap: left promiscuous mode [ 76.464048][ T11] veth0_macvtap: left promiscuous mode [ 76.469729][ T11] veth1_vlan: left promiscuous mode [ 76.475417][ T11] @ÿ: left promiscuous mode [ 76.480904][ T11] veth1_macvtap: left promiscuous mode [ 76.486550][ T11] veth0_macvtap: left promiscuous mode [ 76.603877][ T11] team0 (unregistering): Port device team_slave_1 removed [ 76.616306][ T11] team0 (unregistering): Port device team_slave_0 removed [ 76.674052][ T11] team0 (unregistering): Port device team_slave_1 removed [ 76.684640][ T11] team0 (unregistering): Port device team_slave_0 removed [ 78.258484][ T141] bridge_slave_1: left allmulticast mode [ 78.264233][ T141] bridge_slave_1: left promiscuous mode [ 78.269886][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.278137][ T141] bridge_slave_0: left allmulticast mode [ 78.283801][ T141] bridge_slave_0: left promiscuous mode [ 78.289687][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.377317][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.387535][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.397379][ T141] bond0 (unregistering): Released all slaves [ 78.438265][ T141] hsr_slave_0: left promiscuous mode [ 78.444000][ T141] hsr_slave_1: left promiscuous mode [ 78.449691][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.457133][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.464739][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.473443][ T141] veth1_macvtap: left promiscuous mode [ 78.479070][ T141] veth0_macvtap: left promiscuous mode [ 78.484602][ T141] veth1_vlan: left promiscuous mode [ 78.489855][ T141] veth0_vlan: left promiscuous mode [ 78.565006][ T141] team0 (unregistering): Port device team_slave_1 removed [ 78.574834][ T141] team0 (unregistering): Port device team_slave_0 removed [ 80.024890][ T4508] kmmpd-loop2: attempt to access beyond end of device [ 80.024890][ T4508] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 80.038348][ T4508] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 80.075116][ T57] EXT4-fs error: 33303 callbacks suppressed [ 80.075166][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 80.092989][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 80.102455][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 80.114765][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 80.124600][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 80.136730][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 80.145850][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 80.157734][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 80.166886][ T57] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #19: comm kworker/u8:4: mark_inode_dirty error [ 80.178468][ T57] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory